防火墙

#查看允许通过
[root@localhost ~]# firewall-cmd --list-all
public (active)
target: default
icmp-block-inversion: no
interfaces: ens32 ens36
sources:
services: dhcpv6-client ssh
ports:
protocols:
masquerade: no
forward-ports:
sourceports:
icmp-blocks:
rich rules:

#放行ftp
[root@localhost ~]# firewall-cmd --permanent --add-service=ftp
success
#重新加载
[root@localhost ~]# firewall-cmd --reload
success

#seliunx
seliunx ： setenforce 0

#放行nfs
[root@localhost ~]# firewall-cmd --permanent --add-service=nfs
success
#重新加载
[root@localhost ~]# firewall-cmd --reload
success