centos7 防火墙

firewall-cmd --permanent --zone=public --add-rich-rule="rule family="ipv4" source address="192.168.10.0/24" accept"

添加一个网段内网互通

firewall-cmd --permanent --zone=public --add-rich-rule="rule family="ipv4" source address="106.39.102.1xx" port protocol="tcp" port="9100-9200" accept"

添加一个ip开放某个端口范围

 

最后规则生效

firewall-cmd --reload