firewall常用操作

#给启动文件执行权限
chmod a+x /etc/rc.d/rc.local
#启用防火墙
systemctl enable firewalld
systemctl start firewalld
firewall-cmd --add-port=22/tcp --permanent
firewall-cmd --add-port=80/tcp --permanent
firewall-cmd --add-port=8070/tcp --permanent
firewall-cmd --add-port=8080/tcp --permanent

firewall-cmd --add-port=8090/tcp --permanent

firewall-cmd --permanent --add-rich-rule 'rule family=ipv4 source address=10.162.61.14 port port=8379 protocol=tcp accept'

systemctl restart firewalld

firewall-cmd --permanent --remove-rich-rule 'rule family=ipv4 source address=192.168.0.1/2 port port=80 protocol=tcp accept'

firewall-cmd --permanent --add-source=10.162.61.14

systemctl restart firewalld

#防火墙状态
#firewall-cmd --state
#查看默认区域的所有服务

#firewall-cmd --list-all