查看当前已经开放的端口： 

firewall-cmd --list-ports

开启tcp/udp端口，以8888为例：

firewall-cmd --zone=public --add-port=8888/tcp --permanent

firewall-cmd --zone=public --add-port=8888/udp --permanent

重启防火墙：

firewall-cmd --reload

添加端口：【范围】

firewall-cmd --zone=public --add-port=1-65535/tcp --permanent

firewall-cmd --zone=public --add-port=1-65535/udp --permanent

禁止firewall开机启动

systemctl disable firewalld
Removed symlink /etc/systemd/system/multi-user.target.wants/firewalld.service.
Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.

设置firewall开机启动

systemctl enable firewalld
Created symlink from /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service to /usr/lib/systemd/system/firewalld.service.
Created symlink from /etc/systemd/system/multi-user.target.wants/firewalld.service to /usr/lib/systemd/system/firewalld.service.