防火墙的部署

yum install firewalld firewall-config

1.火墙的启动

systemctl stop iptables.service

systemctl disable iptables.service

systemctl start firewalld.service

systemctl enable firewalld.service

2.firewall管理

<1>firewall-cmd --state   #查看火墙状态

running

<2>firewall-cmd --get-active-zones  #查看火墙当前生效的域

<3> firewall-cmd --get-default-zone   #查看火墙控制的域,默认为public

<4>firewall-cmd --get-zones   #列出所有可用域

<5> firewall-cmd --zone=public --list-all  #列出public域的所有信息

 

<6>firewall-cmd --get-services     #列出可以控制的协议名称

<7>firewall-cmd --list-all-zones     #列出所有域的状态

<7>firewall-cmd --set-default-zone=dmz      #仅接受ssh服务连接

success

<8>firewall-cmd --set-default-zone=trusted

success

<9> firewall-cmd --list-all  #列出所有域的规则

trusted (default, active)

  interfaces: eth0

  sources:

  services:

  ports:

  masquerade: no

  forward-ports: