firewall-cmd --zone=external --add-forward-port=port=3389:proto=tcp:toport=3389:toaddr=192.168.10.10 --permanent firewall-cmd --reload
参考：
https://stackoverflow.com/questions/19897743/exposing-a-port-on-a-live-docker-container
https://stackoverflow.com/questions/19335444/how-do-i-assign-a-port-mapping-to-an-existing-docker-container