centos7防火墙端口映射

第一步:/etc/sysctl.conf中加入,然后sysctl -p
net.ipv4.ip_forward = 1

第二步:查询是否打开转发,no打开
firewall-cmd --query-masquerade
为no执行下面
firewall-cmd --add-masquerade --permanent

第三步:转发规则并指定源ip;一个规则完成删除再执行另一个,只需改变to-addr值
firewall-cmd --add-rich-rule=‘rule family=ipv4 source address=202.117.205.126/32 forward-port port=0-65535 protocol=tcp to-addr=192.168.11.115’ --permanent
firewall-cmd --add-rich-rule=‘rule family=ipv4 source address=292.117.205.126/32 forward-port port=0-65535 protocol=udp to-addr=192.168.11.115’ --permanent

firewall-cmd --remove-rich-rule=‘rule family=ipv4 source address=202.117.205.126/32 forward-port port=0-65535 protocol=tcp to-addr=192.168.11.115’ --permanent
firewall-cmd --remove-rich-rule=‘rule family=ipv4 source address=202.117.205.126/32 forward-port port=0-65535 protocol=udp to-addr=192.168.11.115’ --permanent

firewall-cmd --reload

第四步:关闭转发
firewall-cmd --remove-masquerade --permanent
firewall-cmd --reload
sysctl.conf中去掉net.ipv4.ip_forward = 1,然后sysctl -p

易点知识库( https://sun.book77.com) 原创。