笔记：centos7配置防火墙指定ip访问3306端口

1. 删除原有端口访问规则

   firewall-cmd --permanent --zone=public --remove-port=3306/tcp

2. 添加规则

   firewall-cmd --permanent --zone=public --add-rich-rule="rule family="ipv4" source address="10.104.0.69" port protocol="tcp" port="3306" accept"

3. 生效规则

   firewall-cmd --reload

4. 查看结果

   firewall-cmd --list-all

5. 删除规则

   firewall-cmd --permanent --zone=public --remove-rich-rule="rule family="ipv4" source address="10.104.0.69" port protocol="tcp" port="3306" accept"

6. 添加指定网段，允许访问3306

   firewall-cmd --permanent --zone="public" --add-rich-rule="rule family="ipv4" source address="10.104.0.0/24" port="3306" accept"