Linux怎么删除tcp服务器端口,linux – firewalld端口在删除端口和服务后仍...

我已经创建了一个脚本来安装和配置Centos 7上的firewalld.

大多数规则都正常工作,但在运行nmap扫描时,SSH端口仍显示为Open.我知道这不是什么大不了的事情,改变端口只是默默无闻的安全,但想知道原因.

firewall-cmd --zone=dmz --add-masquerade --permanent

firewall-cmd --zone=dmz --add-interface=eth0

firewall-cmd --zone=internal --add-port=${MONGO}/tcp --permanent

firewall-cmd --zone=internal --add-port=${CHAT}/tcp --permanent

firewall-cmd --zone=internal --add-port=${NFS_CLIENT}/tcp --permanent

firewall-cmd --zone=internal --add-port=${NODE_EX}/tcp --permanent

firewall-cmd --zone=dmz --add-forward- port=port=${22}:proto=tcp:toport=${22123} --permanent

firewall-cmd --zone=dmz --add-port=${RSSH}/tcp --permanent --permanent

Starting Nmap 7.40 ( https://nmap.org ) at 2017-10-04 17:33 BST

Nmap scan report for

Host is up (0.45s latency).

Not shown: 997 filtered ports

PORT STATE SERVICE

22/tcp open ssh

8083/tcp open us-srv

8086/tcp closed d-s-n

sudo firewall-cmd --list-all

dmz (active)

target: default

icmp-block-inversion: no

interfaces: eth0 eth1

sources:

services:

ports: 22123/tcp 8086/tcp 8083/tcp

protocols:

masquerade: yes

forward-ports: port=22:proto=tcp:toport=22123:toaddr=

source-ports:

icmp-blocks:

rich rules:

欢迎所有想法.谢谢