CentOS7-安装防火墙

安装防火墙

安装firewalld

$ yum install -y firewalld

启动
$ systemctl start firewalld

自启动

$ systemctl enable firewalld

添加端口

$ firewall-cmd --zone=public --add-port=8080/tcp --permanent
$ firewall-cmd --zone=public --add-port=8000-9000/tcp --permanent
或指定访问IP地址，不指定端口和协议则全端口，如：firewall-cmd --permanent --add-rich-rule="rule family=ipv4 source address=xxx.xxx.xxx.xxx accept"
$ firewall-cmd --permanent --add-rich-rule="rule family=ipv4 source address=xxx.xxx.xxx.xxx port protocol=tcp port=8080 accept"
$ firewall-cmd --reload

删除：firewall-cmd --zone=public --remove-port=8080/tcp --permanent
阻止：firewall-cmd --permanent --add-rich-rule="rule family=ipv4 source address=xxx.xxx.xxx.xxx reject"

更新规则：firewall-cmd --reload

$ firewall-cmd --zone=public --list-ports
$ firewall-cmd --list-ports

查看配置规则

$ cat /etc/firewalld/zones/public.xml