centos7中firewall防火墙命令详解

素颜马尾好姑娘i 2024-04-17 05:45 70阅读 0赞

<table> 
 <tbody> 
 <tr> 
 <td>安装防火墙</td> 
 <td> <pre><code>yum install firewalld </code></pre> &nbsp; </td> 
 </tr> 
 <tr> 
 <td>开启防火墙</td> 
 <td> <pre><code>systemctl start firewalld.service</code></pre> &nbsp; </td> 
 </tr> 
 <tr> 
 <td>关闭防火墙</td> 
 <td> <pre><code>systemctl stop firewalld.service</code></pre> &nbsp; </td> 
 </tr> 
 <tr> 
 <td>开机自动启动</td> 
 <td> <pre><code>systemctl enable firewalld.service</code></pre> &nbsp; </td> 
 </tr> 
 <tr> 
 <td>关闭开机制动启动</td> 
 <td> <pre><code>systemctl disable firewalld.service</code></pre> &nbsp; </td> 
 </tr> 
 <tr> 
 <td>查看状态</td> 
 <td> <pre><code>systemctl status firewalld</code></pre> 如果结果是 firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Active: active (running) since Mon 2016-09-05 02:34:07 UTC; 15min ago Main PID: 3447 (firewalld) CGroup: /system.slice/firewalld.service └─3447 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid Sep 05 02:34:07 vultr.guest systemd[1]: Starting firewalld - dynamic firewall daemon... Sep 05 02:34:07 vultr.guest systemd[1]: Started firewalld - dynamic firewall daemon. &nbsp; &nbsp;firewall-cmd 命令 </td> 
 </tr> 
 <tr> 
 <td>查看状态</td> 
 <td> <pre><code>firewall-cmd --state //running 表示运行</code></pre> &nbsp; &nbsp; </td> 
 </tr> 
 </tbody> 
</table>

<table> 
 <tbody> 
 <tr> 
 <td>获取活动的区域</td> 
 <td> <pre><code>firewall-cmd --get-active-zones</code></pre> &nbsp; </td> 
 </tr> 
 <tr> 
 <td>获取所有支持的服务</td> 
 <td> <pre><code>firewall-cmd --get-service</code></pre> &nbsp; </td> 
 </tr> 
 <tr> 
 <td>开启应急模式阻断所有网络连接</td> 
 <td> <pre><code>firewall-cmd --panic-on //在 0.3.0 之前的 FirewallD版本中, panic 选项是 –enable-panic 与 –disable-panic
</code></pre> &nbsp; </td> 
 </tr> 
 <tr> 
 <td>关闭应急模式</td> 
 <td> <pre><code>firewall-cmd --panic-off</code></pre> &nbsp; </td> 
 </tr> 
 <tr> 
 <td>查看应急模式的状态</td> 
 <td> <pre><code>firewall-cmd --query-panic</code></pre> &nbsp; </td> 
 </tr> 
 <tr> 
 <td>启动服务</td> 
 <td> <pre><code>#systemctl start firewalld.service //开启服务
#systemctl enable firewalld.service //开机制动启动
 
#systemctl stop firewalld.service //关闭服务
#systemctl disable firewalld.service //禁止开机启动
</code></pre> &nbsp; </td> 
 </tr> 
 <tr> 
 <td>在不改变状态的条件下重新加载防火墙</td> 
 <td> <pre><code>firewall-cmd --reload</code></pre> &nbsp; </td> 
 </tr> 
 </tbody> 
</table>

<table> 
 <tbody> 
 <tr> 
 <td>启用某个服务</td> 
 <td> <pre><code># firewall-cmd --zone=public --add-service=https //临时
# firewall-cmd --permanent --zone=public --add-service=https //永久</code></pre> &nbsp; </td> 
 </tr> 
 <tr> 
 <td>开启某个端口</td> 
 <td> <pre><code>#firewall-cmd --permanent --zone=public --add-port=8080-8081/tcp //永久
#firewall-cmd --zone=public --add-port=8080-8081/tcp //临时
</code></pre> &nbsp; </td> 
 </tr> 
 <tr> 
 <td>查看开启的端口和服务</td> 
 <td> <pre><code>#firewall-cmd --permanent --zone=public --list-services //服务空格隔开 例如 dhcpv6-client https ss 
#firewall-cmd --permanent --zone=public --list-ports //端口空格隔开 例如 8080-8081/tcp 8388/tcp 80/tcp
</code></pre> &nbsp; </td> 
 </tr> 
 <tr> 
 <td>使用命令加载设置</td> 
 <td> <pre><code>#firewall-cmd --reload</code></pre> &nbsp; </td> 
 </tr> 
 </tbody> 
</table>