Linux防火墙操作

iptables 是 Centos自带的防火墙工具。下面介绍一下iptables防火墙的操作命令

查看防火墙状态

 service iptables status

[root@localhost ServerAgent-2.2.3]# service iptables status
Table: filter
Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination         
1    ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:3306 

Chain FORWARD (policy ACCEPT)
num  target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination     

关闭防火墙

service iptables stop

[root@localhost ServerAgent-2.2.3]# service iptables stop
iptables: Setting chains to policy ACCEPT: filter          [  OK  ]
iptables: Flushing firewall rules:                         [  OK  ]
iptables: Unloading modules:                               [  OK  ]

开启防火墙

service iptables start

[root@localhost ServerAgent-2.2.3]# service iptables start
iptables: Applying firewall rules:                         [  OK  ]
[root@localhost ServerAgent-2.2.3]# 

重启防火墙

service iptables restart 

[root@localhost ServerAgent-2.2.3]# service iptables restart 
iptables: Setting chains to policy ACCEPT: filter          [  OK  ]
iptables: Flushing firewall rules:                         [  OK  ]
iptables: Unloading modules:                               [  OK  ]
iptables: Applying firewall rules:                         [  OK  ]
[root@localhost ServerAgent-2.2.3]# 

防火墙开放指定端口

例如开放tomcat8080端，MySQL3306端口等。
防火墙文件路径：/etc/sysconfig/iptables
在iptables文件中追加如下内容。重启防火墙

-A INPUT -p tcp -m tcp --dport 3306 -j ACCEPT 
-A INPUT -p tcp -m tcp --dport 8080 -j ACCEPT