Linux防火墙开启关闭指定端口(阿里云需在控制台打开对应端口)

登录阿里云找到防火墙

其他服务器商同理，一样的在防火墙里面开发端口

Linux防火墙开启端口

1、firewall方式(centOS7.*和新版本的CentOS6.*)

1.1、查看防火墙状态

# 方式一(关键字`running`)
firewall-cmd --state

# 方式二(关键字`active`)
systemctl status firewalld

1.2、开启、关闭和重启防火墙

# 开启防火墙
systemctl start firewalld.service
# 或者
systemctl start firewalld

# 零时关闭防火墙
systemctl stop firewalld.service
# 或者
systemctl stop firewalld

# 永久关闭防火墙（必须先临时关闭防火墙，再执行该命令，进行永久关闭）
systemctl disable firewalld.service
# 或者
systemctl disable firewalld

# 重启防火墙
systemctl restart firewalld.service
# 或者
systemctl restart firewalld

# 重载防火墙
firewall-cmd --reload

1.3、开放和关闭指定的端口

# 查看已开放的端口列表
firewall-cmd --list-ports

# 关闭指定端口(添加端口需重载或重启防火墙)
firewall-cmd --zone=public --add-port=8080/tcp --permanent

# 关闭指定端口(添加或者关闭端口需重载或重启防火墙)
firewall-cmd --zone=public --remove-port=8080/tcp --permanent

#查看端口被哪一个进程占用
netstat -lnpt |grep 5672

# centos7默认没有 netstat 命令，需要安装 net-tools 工具：
# 安装 net-tools
yum install -y net-tools

1.4、检查业务是否正常启动监听该端口

# 查看iptables放通端口
iptables -vnL
# 例子：查看80端口是否被监听
netstat -ntulp |grep 80

--
[root@VM-12-15-centos ~]# netstat -ntulp |grep 80
udp6       0      0 fe80::5054:ff:fe25::123 :::*                                669/ntpd  
--

2、修改 iptables 方式 (老版centOS6.*)

# 直接修改iptables
vim /etc/sysconfig/iptables

# 直接添加一行
-A INPUT -m state --state NEW -m tcp -p tcp --dport [端口号] -j ACCEPT


# 重启防火墙
/etc/init.d/iptables restart

3、远程端口测试

# ssh测试端口
ssh -v -p port username@ip

`参数说明`
`-v 调试模式(会打印日志).`
`-p 指定端口`
`username:远程主机的登录用户`
`ip:远程主机`

4、多网卡数据转发设置

# 查看服务器IP转发
sysctl net.ipv4.ip_forward

# 0未开启，1开启
--
[root@VM-12-15-centos ~]# sysctl net.ipv4.ip_forward
net.ipv4.ip_forward = 0
--

# 编辑`/etc/sysctl.conf`文件
sudo vi /etc/sysctl.conf

# 修改`net.ipv4.ip_forward = 1`
--
# sysctl settings are defined through files in
# /usr/lib/sysctl.d/, /run/sysctl.d/, and /etc/sysctl.d/.
#
# Vendors settings live in /usr/lib/sysctl.d/.
# To override a whole file, create a new file with the same in
# /etc/sysctl.d/ and put new settings there. To override
# only specific settings, add a file with a lexically later
# name in /etc/sysctl.d/ and put new settings there.
#
# For more information, see sysctl.conf(5) and sysctl.d(5).

# Controls IP packet forwarding
net.ipv4.ip_forward = 1

# Controls source route verification
"/etc/sysctl.conf" 49L, 1509C
--

# 重启网络
service network restart