#!/bin/bash

# 允许指定端口通过防火墙
function allow_port() {
    # 获取需要放开的端口号
    read -p "请输入需要放开的端口号：" port

    # 获取方向（入站或出站）
    while true; do
        read -p "请输入方向（in或out）：" direction
        case $direction in
            in ) firewall-cmd --add-port=$port/tcp --permanent; break;;
            out ) firewall-cmd --add-port=$port/tcp --permanent --zone=public --add-rich-rule='rule family="ipv4" source address="0.0.0.0/0" port protocol="tcp" port="'$port'" accept'; break;;
            * ) echo "请输入 in 或 out";;
        esac
    done

    # 重新加载防火墙规则
    firewall-cmd --reload
}

# 显示防火墙规则
function show_rules() {
    echo "防火墙规则如下："
    firewall-cmd --list-all
}

# 主菜单
while true; do
    echo "1. 允许指定端口通过防火墙"
    echo "2. 显示防火墙规则"
    echo "3. 退出"

    read -p "请输入选项：" option
    case $option in
        1 ) allow_port;;
        2 ) show_rules;;
        3 ) exit;;
        * ) echo "请输入正确的选项";;
    esac
done