iptables 是 Centos自带的防火墙工具。下面介绍一下iptables防火墙的操作命令
查看防火墙状态
service iptables status
[root@localhost ServerAgent-2.2.3]# service iptables status
Table: filter
Chain INPUT (policy ACCEPT)
num target prot opt source destination
1 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:3306
Chain FORWARD (policy ACCEPT)
num target prot opt source destination
Chain OUTPUT (policy ACCEPT)
num target prot opt source destination
关闭防火墙
service iptables stop
[root@localhost ServerAgent-2.2.3]# service iptables stop
iptables: Setting chains to policy ACCEPT: filter [ OK ]
iptables: Flushing firewall rules: [ OK ]
iptables: Unloading modules: [ OK ]
开启防火墙
service iptables start
[root@localhost ServerAgent-2.2.3]# service iptables start
iptables: Applying firewall rules: [ OK ]
[root@localhost ServerAgent-2.2.3]#
重启防火墙
service iptables restart
[root@localhost ServerAgent-2.2.3]# service iptables restart
iptables: Setting chains to policy ACCEPT: filter [ OK ]
iptables: Flushing firewall rules: [ OK ]
iptables: Unloading modules: [ OK ]
iptables: Applying firewall rules: [ OK ]
[root@localhost ServerAgent-2.2.3]#
防火墙开放指定端口
例如开放tomcat8080端,MySQL3306端口等。
防火墙文件路径:/etc/sysconfig/iptables
在iptables文件中追加如下内容。重启防火墙
-A INPUT -p tcp -m tcp --dport 3306 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 8080 -j ACCEPT