Linux——firewall防火墙常用命令

启动防火墙：systemctl start firewalld

关闭防火墙：systemctl stop firewalld

开机自启：systemctl enable firewalld

关闭开机自启：systemctl disable firewalld

查看防火墙状态：systemctl status firewalld

查看防火墙规则：firewall-cmd --list-all

开放指定ip和端口，比如开放给192.168.7.117通过6379端口连接

firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.7.117" port protocol="tcp" port="6379" accept"

清除指定端口规则，比如清除主机的6379端口

firewall-cmd --permanent --remove-port 6379/tcp

开放所有ip访问端口，比如开放6379端口

firewall-cmd --zone=public --add-port=6379/tcp --permanent