开启：systemctl start firewalld.service
关闭：systemctl stop firewalld.service
重启：systemctl restart firewalld.service
开机自启： systemctl enable firewalld
状态：firewall-cmd --state / systemctl status firewalld
重载：firewall-cmd --reload
列出开放端口：firewall-cmd --zone=public --list-ports
开放端口：firewall-cmd --zone=public --add-port=80-5000/tcp --permanent
关闭端口：firewall-cmd --remove-port=80/tcp --permanent
