centos7防火墙使用

╰+攻爆jí腚メ 2024-04-17 05:39 75阅读 0赞

> Linux中有两种防火墙软件，ConterOS7.0以上使用的是firewall，ConterOS7.0以下使用的是iptables，本文将分别介绍两种防火墙软件的使用。

## Firewall ##

*  开启防火墙：

systemctl start firewalld

*  关闭防火墙：

systemctl stop firewalld

*  查看防火墙状态：

systemctl status firewalld

*  设置开机启动：

systemctl enable firewalld

*  禁用开机启动：

systemctl disable firewalld

*  重启防火墙：

firewall-cmd --reload

*  开放端口（修改后需要重启防火墙方可生效）：

firewall-cmd --zone=public --add-port=8080/tcp --permanent

![format_png][]

展示图片

*  查看开放的端口：

firewall-cmd --list-ports

![format_png 1][]

展示图片

*  关闭端口：

firewall-cmd --zone=public --remove-port=8080/tcp --permanent

![format_png 2][]

展示图片

## Iptables ##

### 安装 ###

> 由于CenterOS7.0以上版本并没有预装Iptables,我们需要自行装。

*  安装前先关闭firewall防火墙
    
     
    
    ![format_png 3][]
    
    展示图片
 *  安装iptables:

yum install iptables

*  安装iptables-services:

yum install iptables-services

### 使用 ###

*  开启防火墙：

systemctl start iptables.service

![format_png 4][]

展示图片

*  关闭防火墙：

systemctl stop iptables.service

*  查看防火墙状态：

systemctl status iptables.service

*  设置开机启动：

systemctl enable iptables.service

*  禁用开机启动：

systemctl disable iptables.service

*  查看filter表的几条链规则(INPUT链可以看出开放了哪些端口)：

iptables -L -n

![format_png 5][]

展示图片

*  查看NAT表的链规则：

iptables -t nat -L -n

![format_png 6][]

展示图片

*  清除防火墙所有规则：

iptables -F

iptables -X

iptables -Z

*  给INPUT链添加规则（开放8080端口）：

iptables -I INPUT -p tcp --dport 8080 -j ACCEPT

![format_png 7][]

展示图片

*  查找规则所在行号：

iptables -L INPUT --line-numbers -n

![format_png 8][]

展示图片

*  根据行号删除过滤规则（关闭8080端口）：

iptables -D INPUT 1

![format_png 9][]

[format_png]: https://imgconvert.csdnimg.cn/aHR0cHM6Ly91cGxvYWQtaW1hZ2VzLmppYW5zaHUuaW8vdXBsb2FkX2ltYWdlcy8xOTM5NTkyLTAzY2U3NGMzMWEzYzM4MDAucG5nP2ltYWdlTW9ncjIvYXV0by1vcmllbnQvc3RyaXAlN0NpbWFnZVZpZXcyLzIvdy84NTkvZm9ybWF0L3dlYnA?x-oss-process=image/format,png
[format_png 1]: https://imgconvert.csdnimg.cn/aHR0cHM6Ly91cGxvYWQtaW1hZ2VzLmppYW5zaHUuaW8vdXBsb2FkX2ltYWdlcy8xOTM5NTkyLTM3MTI2YWFjN2M5MmEzMDgucG5nP2ltYWdlTW9ncjIvYXV0by1vcmllbnQvc3RyaXAlN0NpbWFnZVZpZXcyLzIvdy81MzIvZm9ybWF0L3dlYnA?x-oss-process=image/format,png
[format_png 2]: https://imgconvert.csdnimg.cn/aHR0cHM6Ly91cGxvYWQtaW1hZ2VzLmppYW5zaHUuaW8vdXBsb2FkX2ltYWdlcy8xOTM5NTkyLTc3N2EwOTAzNTA1NjRiOGEucG5nP2ltYWdlTW9ncjIvYXV0by1vcmllbnQvc3RyaXAlN0NpbWFnZVZpZXcyLzIvdy84ODkvZm9ybWF0L3dlYnA?x-oss-process=image/format,png
[format_png 3]: https://imgconvert.csdnimg.cn/aHR0cHM6Ly91cGxvYWQtaW1hZ2VzLmppYW5zaHUuaW8vdXBsb2FkX2ltYWdlcy8xOTM5NTkyLWJkNWFmYzZmZTBkZjg3NWYucG5nP2ltYWdlTW9ncjIvYXV0by1vcmllbnQvc3RyaXAlN0NpbWFnZVZpZXcyLzIvdy8xMDAwL2Zvcm1hdC93ZWJw?x-oss-process=image/format,png
[format_png 4]: https://imgconvert.csdnimg.cn/aHR0cHM6Ly91cGxvYWQtaW1hZ2VzLmppYW5zaHUuaW8vdXBsb2FkX2ltYWdlcy8xOTM5NTkyLWY0NWMzMTNmMTVjYjcwZGIucG5nP2ltYWdlTW9ncjIvYXV0by1vcmllbnQvc3RyaXAlN0NpbWFnZVZpZXcyLzIvdy85OTQvZm9ybWF0L3dlYnA?x-oss-process=image/format,png
[format_png 5]: https://imgconvert.csdnimg.cn/aHR0cHM6Ly91cGxvYWQtaW1hZ2VzLmppYW5zaHUuaW8vdXBsb2FkX2ltYWdlcy8xOTM5NTkyLTBiNjFlOTk3ZGIyODZiM2MucG5nP2ltYWdlTW9ncjIvYXV0by1vcmllbnQvc3RyaXAlN0NpbWFnZVZpZXcyLzIvdy85NTIvZm9ybWF0L3dlYnA?x-oss-process=image/format,png
[format_png 6]: https://imgconvert.csdnimg.cn/aHR0cHM6Ly91cGxvYWQtaW1hZ2VzLmppYW5zaHUuaW8vdXBsb2FkX2ltYWdlcy8xOTM5NTkyLTJhZGIwZWRhNTNjOGU0ODMucG5nP2ltYWdlTW9ncjIvYXV0by1vcmllbnQvc3RyaXAlN0NpbWFnZVZpZXcyLzIvdy81MzgvZm9ybWF0L3dlYnA?x-oss-process=image/format,png
[format_png 7]: https://imgconvert.csdnimg.cn/aHR0cHM6Ly91cGxvYWQtaW1hZ2VzLmppYW5zaHUuaW8vdXBsb2FkX2ltYWdlcy8xOTM5NTkyLWQ0YTZhODE1ZjY2MWJlY2YucG5nP2ltYWdlTW9ncjIvYXV0by1vcmllbnQvc3RyaXAlN0NpbWFnZVZpZXcyLzIvdy85NTgvZm9ybWF0L3dlYnA?x-oss-process=image/format,png
[format_png 8]: https://imgconvert.csdnimg.cn/aHR0cHM6Ly91cGxvYWQtaW1hZ2VzLmppYW5zaHUuaW8vdXBsb2FkX2ltYWdlcy8xOTM5NTkyLTU5NGI0YjcyOTk0ZWE2NzYucG5nP2ltYWdlTW9ncjIvYXV0by1vcmllbnQvc3RyaXAlN0NpbWFnZVZpZXcyLzIvdy8xMDAwL2Zvcm1hdC93ZWJw?x-oss-process=image/format,png
[format_png 9]: https://imgconvert.csdnimg.cn/aHR0cHM6Ly91cGxvYWQtaW1hZ2VzLmppYW5zaHUuaW8vdXBsb2FkX2ltYWdlcy8xOTM5NTkyLTI3YWM3ZDhkZDM1MWE5MjEucG5nP2ltYWdlTW9ncjIvYXV0by1vcmllbnQvc3RyaXAlN0NpbWFnZVZpZXcyLzIvdy85NTYvZm9ybWF0L3dlYnA?x-oss-process=image/format,png