firewall-cmd常用命令

firewall-cmd常用命令 #开启防火墙 systemctlstartfirewalld.service #防火墙开机启动
systemctlenablefirewalld.service #关闭防火墙 systemctlstopfirewalld.service #查看防火墙状态
firewall-cmd--state #查看现有的规则 iptables-nL firewall-cmd--zone=public--list-ports
#重载防火墙配置 firewall-cmd--reload #添加单个单端口 firewall-cmd--permanent--zone=public--add
-port=81/tcp #添加多个端口 firewall-cmd--permanent--zone=public--add-port=8080-8083/
tcp #删除某个端口 firewall-cmd--permanent--zone=public--remove-port=81/tcp
#针对某个IP开放端口 firewall-cmd--permanent--add-rich-rule="rulefamily="ipv4"source
address="192.168.142.166"portprotocol="tcp"port="6379"accept" firewall-cmd--
permanent--add-rich-rule="rulefamily="ipv4"source address="192.168.0.233"
accept" #删除某个IP firewall-cmd--permanent--remove-rich-rule="rulefamily="
ipv4"source address="192.168.1.51"accept" #针对一个ip段访问 firewall-cmd--permanent--
add-rich-rule="rulefamily="ipv4"source address="192.168.0.0/16"accept" firewall-
cmd--permanent--add-rich-rule="rulefamily="ipv4"source address="192.168.1.0/24"
portprotocol="tcp"port="9200"accept" #添加操作后别忘了执行重载 firewall-cmd--reload

• « 上一篇：高防ip哪家强？甜甜来告诉您
• » 下一篇：Mysql获取最新的一条记录