SUSE 配置防火墙策略

最新推荐文章于 2024-04-30 17:15:06 发布

samson_www

最新推荐文章于 2024-04-30 17:15:06 发布

阅读量489

点赞数 8

分类专栏： IT技术文章标签：网络安全服务器

本文链接：https://blog.csdn.net/samson_www/article/details/136436725

版权

IT技术专栏收录该内容

132 篇文章 2 订阅

订阅专栏

一.获取目前访问的接口
suse12sp3 # netstat -tunlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:8005 0.0.0.0:* LISTEN 2481/java
tcp 0 0 127.0.0.1:199 0.0.0.0:* LISTEN 2249/snmpd

二.修改防火墙策略
suse12sp3:~ # cd /etc/sysconfig
suse12sp3:~ # vi SuSEfirewall2
修改允许的端口号
--允许的端口号
FW_SERVICES_EXT_TCP="7800 8005 8009 8080 22"
--允许指定IP协议的端口范围（
FW_SERVICES_ACCEPT_EXT="192.168.0.225,tcp,50000"
--多地址写法
FW_SERVICES_ACCEPT_EXT="192.168.1.225 192.168.1.122,tcp,50000"
--多端口写法
FW_SERVICES_ACCEPT_EXT="192.168.1.225 192.168.1.122,tcp,22 50000"
--连续端口写法
FW_SERVICES_ACCEPT_EXT="192.168.1.225 192.168.1.122,tcp,22:50000"

三.开启防火墙策略
systemctl enable SuSEfirewall2.service
suse12sp3:~ # /etc/sysconfig # systemctl enable SuSEfirewall2.service
Created symlink from /etc/systemd/system/SuSEfirewall2_setup.service to /usr/lib/systemd/system/SuSEfirewall2.service.
Created symlink from /etc/systemd/system/multi-user.target.wants/SuSEfirewall2.service to /usr/lib/systemd/system/SuSEfirewall2.service.
Created symlink from /etc/systemd/system/multi-user.target.wants/SuSEfirewall2_init.service to /usr/lib/systemd/system/SuSEfirewall2_init.service.

四.启动防火墙
suse12sp3:~ #systemctl start SuSEfirewall2.service
或者
suse12sp3:~ #SuSEfirewall2 start

五.查看状态
suse12sp3:~ #systemctl status SuSEfirewall2.service

六.关闭防火墙
suse12sp3:~ #systemctl stop SuSEfirewall2.service
或者
suse12sp3:~ #SuSEfirewall2 stop