一.獲取目前訪問的接口
suse12sp3 # netstat -tunlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address ? ? ? ? ? Foreign Address ? ? ? ? State ? ? ? PID/Program name ??
tcp ? ? ? ?0 ? ? ?0 127.0.0.1:8005 ? ? ? ? ?0.0.0.0:* ? ? ? ? ? ? ? LISTEN ? ? ?2481/java ? ? ? ? ??
tcp ? ? ? ?0 ? ? ?0 127.0.0.1:199 ? ? ? ? ? 0.0.0.0:* ? ? ? ? ? ? ? LISTEN ? ? ?2249/snmpd ? ? ? ? ?

二.修改防火墻策略
suse12sp3:~ # cd /etc/sysconfig
suse12sp3:~ # vi SuSEfirewall2
修改允許的端口號
--允許的端口號
FW_SERVICES_EXT_TCP="7800 8005 8009 8080 22"
--允許指定IP協議的端口范圍（
FW_SERVICES_ACCEPT_EXT="192.168.0.225,tcp,50000"
--多地址寫法
FW_SERVICES_ACCEPT_EXT="192.168.1.225 192.168.1.122,tcp,50000"
--多端口寫法
FW_SERVICES_ACCEPT_EXT="192.168.1.225 192.168.1.122,tcp,22 50000"
--連續端口寫法
FW_SERVICES_ACCEPT_EXT="192.168.1.225 192.168.1.122,tcp,22:50000"

三.開啟防火墻策略
systemctl enable SuSEfirewall2.service
suse12sp3:~ # /etc/sysconfig # systemctl enable SuSEfirewall2.service
Created symlink from /etc/systemd/system/SuSEfirewall2_setup.service to /usr/lib/systemd/system/SuSEfirewall2.service.
Created symlink from /etc/systemd/system/multi-user.target.wants/SuSEfirewall2.service to /usr/lib/systemd/system/SuSEfirewall2.service.
Created symlink from /etc/systemd/system/multi-user.target.wants/SuSEfirewall2_init.service to /usr/lib/systemd/system/SuSEfirewall2_init.service.

四.啟動防火墻
suse12sp3:~ #systemctl start SuSEfirewall2.service
或者
suse12sp3:~ #SuSEfirewall2 start

五.查看狀態
suse12sp3:~ #systemctl status SuSEfirewall2.service

六.關閉防火墻
suse12sp3:~ #systemctl stop ?SuSEfirewall2.service
或者
suse12sp3:~ #SuSEfirewall2 stop