Firewalld常用操作

启动、停止、查看、重载命令

systemctl start firewalld
systemctl enable firewalld
systemctl status firewalld
systemctl stop firewalld 
systemctl restart firewalld.service 
firewall-cmd --reload

显示默认区域的所有规则

firewall-cmd --list-all

开启关闭特定端口

firewall-cmd --add-port=80/tcp --permanent
firewall-cmd --remove-port=80/tcp --permanent

 禁止出站流量

0表示最高优先级，越小越优先

firewall-cmd --direct --add-rule ipv4 filter OUTPUT 0 -d 192.168.200.1/32 -j REJECT