firewall-cmd --zone=public --add-port=3306/tcp --permanent
firewall-cmd --reload
查看所有打开的端口: firewall-cmd --zone=public --list-ports
firewall-cmd --zone= public --remove-port=3306/tcp --permanent