1,防火墙启动
systemctl start firewalld
2.开启某个端口
firewall-cmd --permanent --zone=public --add-port=80/tcp
3.设置某个端口白名单
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.1.1" port protocol="tcp" port="2222" accept"

1,防火墙启动
systemctl start firewalld
2.开启某个端口
firewall-cmd --permanent --zone=public --add-port=80/tcp
3.设置某个端口白名单
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.1.1" port protocol="tcp" port="2222" accept"