firewall-cmd使用--remove-rich-rule删除rich-rule规则

命令格式:
firewall-cmd --permanent --remove-rich-rule '规则列表'
firewall-cmd --permanent --remove-rich-rule 'rule family="ipv4" source address="0.0.0.0/0" forward-port port="8077" protocol="tcp" to-port="80" to-addr="192.168.4.245"'

下面是示例操作:

#显示规则列表
[root@new-center ~]# firewall-cmd --list-rich-rules 
rule family="ipv4" source address="0.0.0.0/0" forward-port port="2224" protocol="tcp" to-port="2224" to-addr="192.168.11.241"
rule family="ipv4" source address="0.0.0.0/0" forward-port port="1935" protocol="tcp" to-port="1935" to-addr="192.168.4.189"
rule family="ipv4" source address="0.0.0.0/0" forward-port port="23456" protocol="tcp" to-port="23456" to-addr="192.168.4.187"
rule family="ipv4" source address="0.0.0.0/0" forward-port port="10555" protocol="tcp" to-port="10555" to-addr="192.168.4.234"
rule family="ipv4" source address="0.0.0.0/0" forward-port port="8078" protocol="tcp" to-port="8080" to-addr="192.168.4.234"
rule family="ipv4" source address="0.0.0.0/0" forward-port port="8010" protocol="tcp" to-port="8010" to-addr="192.168.11.118"
rule family="ipv4" source address="0.0.0.0/0" forward-port port="8000" protocol="tcp" to-port="8000" to-addr="192.168.11.118"
rule family="ipv4" source address="0.0.0.0/0" forward-port port="3722" protocol="tcp" to-port="22" to-addr="192.168.11.249"
rule family="ipv4" source address="0.0.0.0/0" forward-port port="5080" protocol="tcp" to-port="5080" to-addr="192.168.11.244"
rule family="ipv4" source address="0.0.0.0/0" forward-port port="23389" protocol="tcp" to-port="3389" to-addr="192.168.11.36"
#删除rich rule
[root@new-center ~]# firewall-cmd --permanent --remove-rich-rule 'rule family="ipv4" source address="0.0.0.0/0" forward-port port="2224" protocol="tcp" to-port="2224" to-addr="192.168.11.241"'
success
[root@new-center ~]#  firewall-cmd --permanent --remove-rich-rule 'rule family="ipv4" source address="0.0.0.0/0" forward-port port="23389" protocol="tcp" to-port="3389" to-addr="192.168.11.36"'
success
[root@new-center ~]#  firewall-cmd --permanent --remove-rich-rule 'rule family="ipv4" source address="0.0.0.0/0" forward-port port="5080" protocol="tcp" to-port="5080" to-addr="192.168.11.244"'
success
[root@new-center ~]#  firewall-cmd --permanent --remove-rich-rule 'rule family="ipv4" source address="0.0.0.0/0" forward-port port="3722" protocol="tcp" to-port="22" to-addr="192.168.11.249"'
success
[root@new-center ~]#  firewall-cmd --permanent --remove-rich-rule 'rule family="ipv4" source address="0.0.0.0/0" forward-port port="8000" protocol="tcp" to-port="8000" to-addr="192.168.11.118"'
success
[root@new-center ~]#  firewall-cmd --permanent --remove-rich-rule 'rule family="ipv4" source address="0.0.0.0/0" forward-port port="8010" protocol="tcp" to-port="8010" to-addr="192.168.11.118"'
success
[root@new-center ~]#  firewall-cmd --permanent --remove-rich-rule 'rule family="ipv4" source address="0.0.0.0/0" forward-port port="8078" protocol="tcp" to-port="8080" to-addr="192.168.4.234"'
success
[root@new-center ~]#  firewall-cmd --permanent --remove-rich-rule 'rule family="ipv4" source address="0.0.0.0/0" forward-port port="10555" protocol="tcp" to-port="10555" to-addr="192.168.4.234"'
success
[root@new-center ~]#  firewall-cmd --permanent --remove-rich-rule 'rule family="ipv4" source address="0.0.0.0/0" forward-port port="23456" protocol="tcp" to-port="23456" to-addr="192.168.4.187"'
success
[root@new-center ~]#  firewall-cmd --permanent --remove-rich-rule 'rule family="ipv4" source address="0.0.0.0/0" forward-port port="1935" protocol="tcp" to-port="1935" to-addr="192.168.4.189"'
success
#重载firewalld
[root@new-center ~]# firewall-cmd --reload 
success
#查看rich-rules 
[root@new-center ~]# firewall-cmd --list-rich-rules
  • 0
    点赞
  • 6
    收藏
    觉得还不错? 一键收藏
  • 打赏
    打赏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

少陽君

谢谢老板的拿铁

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付:¥1
获取中
扫码支付

您的余额不足,请更换扫码支付或充值

打赏作者

实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值