$ sudo yum install -y firewalld 
$ sudo systemctl status firewalld 
$ sudo systemctl start firewalld 
$ sudo firewall-cmd --state
output : running 

# Default 조회 
$ sudo firewall-cmd --get-default-zone

# Active Zone list 조회 
$ firewall-cmd --get-active-zones

# 특정 Zone 의 정보 조회 
$ sudo firewall-cmd --zone=home --list-all

$ sudo firewall-cmd --set-default-zone=home

# Http 서비스 허용 
$ sudo firewall-cmd --zone=public --add-service=http
$ sudo firewall-cmd --zone=public --list-services
output : dhcpv6-client http ssh

# Http 서비스 영구 허용 
$ sudo firewall-cmd --zone=public --permanent --add-service=http

# Port/protocol 로 허용 
$ sudo firewall-cmd --zone=public --add-port=5000/tcp
$ sudo firewall-cmd --zone=public --list-ports
output : 5000/tcp

# Port/protocol 로 영구 허용 
$ sudo firewall-cmd --zone=public --add-port=5000/tcp

sudo firewall-cmd --reload

{
firewall-cmd --permanent --add-port=10250/tcp
firewall-cmd --permanent --add-port=10255/tcp
firewall-cmd --permanent --add-port=8472/udp
firewall-cmd --permanent --add-port=30000-32767/tcp
firewall-cmd --add-masquerade --permanent

systemctl restart firewalld
}

{
firewall-cmd --permanent --add-port=80/tcp
firewall-cmd --permanent --add-port=443/tcp

systemctl restart firewalld
}