centos7下端口映射

firewall-cmd --zone=external --add-forward-port=port=3389:proto=tcp:toport=3389:toaddr=192.168.10.10 --permanent
firewall-cmd --reload

参考：

https://stackoverflow.com/questions/19897743/exposing-a-port-on-a-live-docker-container

https://stackoverflow.com/questions/19335444/how-do-i-assign-a-port-mapping-to-an-existing-docker-container

原文：http://www.cnblogs.com/Basu/p/7953604.html