Centos 7 防火墙操作

 只开放一个固定   IP访问端口 

sudo  firewall-cmd –permanent –add-rich-rule=”rule family=”ipv4″ source address=”119.145.33.244″ port protocol=”tcp” port=”2222″ accept” 

删除放一个固定IP访问端口 

sudo firewall-cmd –permanent –remove-rich-rule=”rule family=”ipv4″ source address=”119.145.33.244″ port protocol=”tcp” port=”2222″ accept” 

开放端口不限制IP 

sudo firewall-cmd –zone=public –add-port=2222/tcp –permanent 

删除已经开放的端口 

sudo firewall-cmd  –zone=public –remove-port=2222/tcp  –permanent 

记得生效 

firewall-cmd –reload