1、启动防火墙
systemctl start firewalld.service
2、指定IP与端口
firewall-cmd –permanent –add-rich-rule=”rule family=”ipv4″ source address=”192.168.1.1″ port protocol=”tcp” port=”53″ accept”
指定ip段可以访问
firewall-cmd –permanent –add-rich-rule=”rule family=”ipv4″ source address=”192.168.1.0/24″ port protocol=”tcp” port=”53″ accept”
3、重新载入，使配置生效。
systemctl restart firewalld.service
4、查看配置结果
firewall-cmd –list-all

规则删除命令
firewall-cmd –permanent –remove-rich-rule=”rule family=”ipv4″ source address=”192.168.1.2″ port protocol=”tcp” port=”1234″ accept”