一、unmask
systemctl unmask firewalld.service
二、开放端口
firewall-cmd --zone=public --add-port=80/tcp --permanent
三、开启防火墙
systemctl start firewalld
systemctl unmask firewalld.service
firewall-cmd --zone=public --add-port=80/tcp --permanent
systemctl start firewalld