firewalld 常用指令

# 允许访问端口
firewall-cmd --zone=public --add-port=80/tcp --permanent
# 删除端口
firewall-cmd --zone=public --remove-port=80/tcp --permanent
firewall-cmd --reload

firewall-cmd --permanent --zone=public --add-masquerade
# 添加转发端口
firewall-cmd --add-forward-port=port=80:proto=tcp:toaddr=192.168.0.1:toport=8080 --permanent
# 移除转发端口
firewall-cmd --remove-forward-port=port=80:proto=tcp:toaddr=192.168.0.1:toport=8080 --permanent
firewall-cmd --reload

# openvpn service
firewall-cmd --permanent --add-service openvpn
firewall-cmd --permanent --zone=public --add-masquerade
firewall-cmd --reload
# nfs service
firewall-cmd --permanent --add-service rpc-bind
firewall-cmd --permanent --add-service rpc-mounted
firewall-cmd --permanent --add-service mountd
firewall-cmd --reload

#列出zone public 端口
firewall-cmd --list-all
#列出zone public当前设置
firewall-cmd --zone=public --list-all
#启动防火墙
systemctl start firewalld