centos7 usually use

firewall-cmd --permanent --add-rich-rule 'rule family=ipv4 source address=192.168.22.103 port port=8082 protocol=tcp accept'

添加：

firewall-cmd --zone=public --add-port=6378/tcp --permanent

firewall-cmd --zone=public --add-port=61617/tcp --permanent

firewall-cmd --zone=public --add-port=2182/tcp --permanent

firewall-cmd --zone=public --add-port=8082/tcp --permanent

删除：

firewall-cmd --zone= public --remove-port=6379/tcp --permanent

firewall-cmd --zone= public --remove-port=61616/tcp --permanent

firewall-cmd --zone= public --remove-port=2181/tcp --permanent

firewall-cmd --zone= public --remove-port=8081/tcp --permanent

添加指定ip访问特定端口规则：

firewall-cmd --permanent --add-rich-rule 'rule family=ipv4 source address=192.168.22.204 port port=8082 protocol=tcp accept'

删除指定某个ip访问特定端口规则：

firewall-cmd --permanent --remove-rich-rule="rule family="ipv4" source address="192.168.22.103" port protocol="tcp" port="8082" accept"