IP伪装开关
firewall-cmd --query-masquerade firewall-cmd --add-masquerade firewall-cmd --remove-masquerade 端口转发规则
firewall-cmd --add-forward-port=port=80:proto=tcp:toport=8080 firewall-cmd --add-forward-port=port=80:proto=tcp:toaddr=192.168.2.100 firewall-cmd --add-forward-port=port=80:proto=tcp:toaddr=192.168.2.100:toport=8080