ubuntu ufw firewall防火墙端口设置 (防火墙的的开启、禁用、开放端口、关闭端口、重置、重启…)
firewall
安装
firewall-cmd --zone=public --add-port=6379/tcp --permanent
重新加载防火墙生效上面的配置
firewall-cmd --reload
配置端口是否访问的时候,需要安装防火墙
sudo apt-get install firewalld
firewall
在ubuntu
机器上也可以运行,但是ubuntu
通常使用ufw
的防火墙。
Usage: ufw COMMAND
Commands:
enable enables the firewall
disable disables the firewall
default ARG set default policy
logging LEVEL set logging to LEVEL
allow ARGS add allow rule
deny ARGS add deny rule
reject ARGS add reject rule
limit ARGS add limit rule
delete RULE|NUM delete RULE
insert NUM RULE insert RULE at NUM
route RULE add route RULE
route delete RULE|NUM delete route RULE
route insert NUM RULE insert route RULE at NUM
reload reload firewall
reset reset firewall
status show firewall status
status numbered show firewall status as numbered list of RULES
status verbose show verbose firewall status
show ARG show firewall report
version display version information
Application profile commands:
app list list application profiles
app info PROFILE show information on PROFILE
app update PROFILE update PROFILE
app default ARG set default application policy
ufw
开启
sudo ufw enable
ufw
关闭
sudo ufw disable
ufw
状态查询
sudo ufw status
要获得额外信息,请使用 status verbose
:
sudo ufw status verbose
ufw
允许端口22
sudo ufw allow 22
ufw
禁止端口22
sudo ufw delete allow 22
用 status numbered
得到的所有活动规则的顺序和 ID。当您要插入新编号的规则或根据其编号删除现有规则时,这非常有用。
sudo ufw status numbered
# 输出示例Status: active
To Action From
-- ------ ----
[ 1] 22/tcp ALLOW IN Anywhere
[ 2] 22/tcp (v6) ALLOW IN Anywhere (v6)
ufw
允许协议通过
sudo ufw allow ssh
ufw
删除允许通过的协议
删除 UFW 规则
有两种方法可以删除 UFW 规则:
按规则编号
按规格说明
sudo ufw delete allow ssh
# Status: active
To Action From
-- ------ ----
[ 1] 22/tcp ALLOW IN Anywhere
[ 2] 80/tcp ALLOW IN Anywhere
[ 3] 443/tcp ALLOW IN Anywhere
[ 4] 8069/tcp ALLOW IN Anywhere
# 知道规则编号后,请使用 ufw delete 命令后跟要删除的规则编号。
# 例如,要删除编号为 4 的规则,您可以键入:
sudo ufw delete 4
ufw
防火墙重新加载
sudo ufw reload
ufw
重置
sudo ufw reset