apt-get -y install firewalld
systemctl enable --now firewalld
firewall-cmd --permanent --zone=public/trusted --add-interface=порт
firewall-cmd --permanent --zone=public --add-masquerade
firewall-cmd --complete-reload