firewall-cmd 相关命令总结

firewall-cmd 相关命令总结

mkdir  -p /deploy
cat > /deploy/openip <<EOF
firewall-cmd --zone=trusted --add-source=\$1 --permanent
EOF
cat > /deploy/openport <<EOF
firewall-cmd --zone=public --add-port=\$1/tcp --permanent && firewall-cmd --reload
EOF

cat > /deploy/openippermanet <<EOF
firewall-cmd --zone=trusted --add-source=\$1 --permanent && firewall-cmd --reload
EOF

cat > /deploy/openlist <<EOF
firewall-cmd --state 
firewall-cmd --list-ports
firewall-cmd --zone=public --list-all
firewall-cmd --get-active-zone
EOF

cat > /deploy/getservice <<EOF
firewall-cmd --get-services
EOF
cat > /deploy/removeservice <<EOF
firewall-cmd --remove-service \$1 --permanent && firewall-cmd --reload
EOF

cat > /deploy/removeport <<EOF
firewall-cmd --zone=public --remove-port=\$1/tcp --permanent && firewall-cmd --reload
EOF

cat > /deploy/removeip <<EOF
firewall-cmd --zone=trusted --remove-source=\$1 --permanent
EOF

for i in {$ip1 $ip2} ;
do /deploy/openip $i ;
done

chmod 777 /deploy/* -R 

内外网映射命令

firewall-cmd --permanent --zone=public --add-forward-port=port=15236:proto=tcp:toport=5236:toaddr=192.168.2.201

---

说明

1. openip
打开 IP地址的例外

2. openport
打开端口例外

3. openippermanet
永久打开ip地址的例外. 

4. openlist
查看开放的例外情况

5. getservice
查看打开了那些服务

6. removeservice 
删除某些, 尤其是 ssh 的服务

7. removeport
移除端口例外

8. removeip
移除 ip 的例外. 

9. 内网映射端口

10. ufw 命令
ufw allow from $ip
ufw reload 

11. iptable命令
iptables -I INPUT 10 -s $ip -j ACCEPT
service iptables save