firewall-cmd --zone=public --add-port=端口号/tcp --permanent
systemctl restart firewalld.service
firewall-cmd --state
firewall-cmd --list-all 或者 firewall-cmd --list-ports