firewall-cmd --permanent --zone=public --add-port=3389/tcp

啟動xrdp
#/etc/xrdp/xrdp.sh start ?
重啟xrdp
#/etc/xrdp/xrdp.sh restart

關閉防火牆,或者打開防火牆3389端口
# systemctl stop firewalld.service
# systemctl disable firewalld.servie
或者打開3389端口
# firewall-cmd --permanent --zone=public --add-port=3389/tcp

[20170819-01:19:02] [INFO ] starting xrdp with pid 14818
[20170819-01:19:02] [INFO ] listening to port 3389 on 0.0.0.0

[root@localhost ~]# netstat -antup|grep xrdp
tcp 0 0 0.0.0.0:3389 0.0.0.0:* LISTEN 14818/lt-xrdp

[root@localhost ~]# firewall-cmd --permanent --zone=public --add-port=3389/tcp
success

[root@localhost ~]# systemctl status xrdp.service
● xrdp.service - xrdp daemon
Loaded: loaded (/usr/lib/systemd/system/xrdp.service; disabled; vendor preset: disabled)
Active: inactive (dead)
Docs: man:xrdp(8)
man:xrdp.ini(5)

 

可以看到，xrdp服務啟動了，防火牆的3389端口也打開了，但是，mstsc遠程登錄不行。

[root@localhost ~]# systemctl stop firewalld.service

防火牆停掉以后，就可以遠程登錄了。不知道為什么？