# rcSuSEfirewall2 status | start | stop | restart
vim /etc/sysconfig/SuSEfirewall2
# tcp 端口allow list
FW_SERVICES_EXT_TCP="ssh ftp 1521"
# ip 限制 写法很不灵活
FW_SERVICES_ACCEPT_EXT="10.10.19.194,tcp,8080 10.10.19.195,tcp,8080 10.10.150.225,tcp,8080 10.10.150.96/27,tcp,8080 "