启动:systemctl start firewalld
禁用:systemctl stop firewalld重新载入规则:firewall-cmd --reload查看所有打开的端口:firewall-cmd --zone=public --list-ports临时开放端口:firewall-cmd --zone=public --add-port=3306/tcp永久开放端口:firewall-cmd --zone=public --add-port=3306/tcp --permanent移除端口:firewall-cmd --zone=public --remove-port=3306/tcp --permanent