防火墙
1.查看防火墙
#查看防火墙状态
systemctl status firewalld
#开启防火墙
systemctl start firewalld (或service firewalld restart)
#关闭防火墙
systemctl stop firewalld (或service firewalld stop)
#开机启动
systemctl enable firewalld
#查看防火墙清单
firewall-cmd --list-all
# 查看全部信息
firewall-cmd --list-all
# 只看端口信息
firewall-cmd --list-ports
2.端口相关
#查询打开的端口
firewall-cmd --zone=public --list-ports
#关闭端口8080
firewall-cmd --zone=public --remove-port=8080/tcp --permanent
#重新载入一下防火墙设置,使设置生效
firewall-cmd --reload
===================================================
#查看端口情况
netstat -tunlp | grep 端口号
#开启端口
firewall-cmd --zone=public --add-port=8080/tcp --permanent
firewall-cmd --reload
#批量开放端口(8080到8090)
firewall-cmd --zone=public --add-port=8080-8090/tcp --permanent
firewall-cmd --reload
#批量移除端口(8080到8090)
firewall-cmd --zone=public --remove-port=8080-8090/tcp --permanent
firewall-cmd --reload
#--zone #作用域
#--add-port=80/tcp #添加端口,格式为:端口/通讯协议
#--permanent #永久生效,没有此参数重启后失效
===================================================
#允许ip127.0.0.1访问8080端口
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="127.0.0.1" port protocol="tcp" port="8080" accept"
#重新载入一下防火墙设置,使设置生效
firewall-cmd --reload
#限制ip127.0.0.1访问8080端口
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="127.0.0.1" port protocol="tcp" port="8080" reject"
firewall-cmd --reload
#查看已设置规则
firewall-cmd --zone=public --list-rich-rules
#删除已设置规则
firewall-cmd --permanent --remove-rich-rule="rule family="ipv4" source address="127.0.0.1" port protocol="tcp" port="8080" accept"
firewall-cmd --reload
===================================================
防火墙规则文件地址:/etc/firewalld/zones/public.xml