中科方德防火墙设置

对指定IP开放22端口
sudo firewall-cmd --permanent --add-rich-rule='
  rule family="ipv4" source address="10.75.174.41" port port="22" protocol="tcp" accept'

# 为特定区域开放端口
sudo firewall-cmd --permanent --zone=public --add-port=80/tcp
sudo firewall-cmd --permanent --zone=public --add-port=443/tcp

sudo firewall-cmd --permanent --add-service=http
sudo firewall-cmd --permanent --add-service=https
sudo firewall-cmd --reload

sudo firewall-cmd --list-all       # 查看所有规则

个人IP
10.75.174.41
堡垒机IP  
10.129.250.245 
10.129.250.228