1. 查看firewall 状态
systemctl status firewall
systemctl stop firewall
systemctl start firewall
systemctl restart firewall
2. 修改firewall增删查端口信息
## 添加端口3306
firewall-cmd --zone=public --add-port=3306/tcp --permanent
## 重新装置配置信息,使新配置生效
firewall-cmd --reload
## 查看端口3306是否被加到firewall名单中
firewall-cmd --zone=public --query-port=3306/tcp
## 删除端口3306
firewall-cmd --zone=public --remove-port=3306/tcp --permanent
欢迎关注