# 查询端口是否开放

firewall-cmd --query-port=8080/tcp

# 开放80端口

firewall-cmd --permanent --add-port=80/tcp

# 移除端口

firewall-cmd --permanent --remove-port=8080/tcp

重启 firewall-cmd --reload

查看配置结果

firewall-cmd --list-all

指定端口与ip开放
firewall-cmd --reload

firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="10.0.0.1-10.0.0.5" port protocol="tcp" port="123" accept"


删除规则

firewall-cmd --permanent --remove-rich-rule="rule family="ipv4" source address="10.0.0.2" port protocol="tcp" port="11300" accept"

重启 
firewall-cmd --reload

查看配置结果

firewall-cmd --list-all

firewall-cmd --permanent --add-source=10.0.0.5 --zone=trusted