linux的防火墙的开启以及开放端口和ip

端口号只有整数，范围是从0 到65535（256×256）

#查看状态：
systemctl status firewalld.service

#开启防火墙
[root@os-one ~]# systemctl start firewalld

#重新载入，使配置生效
systemctl restart firewalld.service

#开启特定的端口
firewall-cmd --zone=public --add-port=8888/tcp --permanent  
firewall-cmd --zone=public --add-port=8666/tcp --permanent  

#限制特定的端口

firewall-cmd --zone=public --remove-port=8666/tcp --permanent

#禁止特定ip连接：
firewall-cmd --permanent --zone=public --add-rich-rule="rule family='ipv4' source address='192.168.225.1' service name='ssh' reject"
firewall-cmd --permanent --zone=public --add-rich-rule="rule family='ipv4' source address='192.168.225.1' port port=22 protocol=tcp reject"
firewall-cmd --reload
 firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.142.166" port protocol="tcp" port="30000-31000" accept"

#指定IP与端口
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.142.166" port protocol="tcp" port="5432" accept"

#允许192.168.1.10所有访问TCP协议的22端口
firewall-cmd --zone=public --add-rich-rule 'rule family="ipv4" source address="192.168.1.10" port port=22 protocol=tcp accept' --permanent

#允许192.168.1.10所有访问所有端口
firewall-cmd --zone=public --add-rich-rule 'rule family="ipv4" source address="192.168.1.10" accept' --permanent

firewall-cmd --permanent --remove-rich-rule="rule family="ipv4" source address="192.168.142.166" port protocol="tcp" port="5432" accept"
firewall-cmd --permanent --remove-rich-rule="rule family="ipv4" source address="192.168.142.166" port protocol="tcp" port="5632" accept"
firewall-cmd --permanent --remove-rich-rule="rule family="ipv4" source address="192.168.1.10" port protocol="tcp" port="22" accept"

#查看配置结果

firewall-cmd --list-all