博客

防火墙配置端口开放规则

查看防火墙状态

[root@localhost ~]# firewall-cmd --state 
running //默认开启

查看防火墙当前规则

[root@localhost ~]# firewall-cmd --list-all 
public (active)
  target: default
  icmp-block-inversion: no
  interfaces: ens33
  sources:
  services: ssh dhcpv6-client
  ports: 		     //查看放出的端口，默认未放出任何端口
  protocols:
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:

查看80端口是否放行

[root@localhost ~]# firewall-cmd --query-port 80/tcp 
no

开放指定端口
不加permanent代表临时开启，重启后失效
加permanent代表永久开启，除非手动关闭

开放一个80端口,重启防火墙规则生效

[root@localhost ~]# firewall-cmd --permanent --add-port=80/tcp 
success

[root@localhost ~]# firewall-cmd --permanent --add-port=80-100/tcp //开放区间端口80-100,重启防火墙规则生效
success

重启防火墙规则

[root@localhost ~]# firewall-cmd --reload 
success
[root@localhost ~]# firewall-cmd --query-port=80/tcp //查看80是否放行成功
yes

关闭80端口

[root@localhost ~]# firewall-cmd --permanent --remove-port=80/tcp 
success
[root@localhost ~]# firewall-cmd --reload
success
[root@localhost ~]# firewall-cmd --query-port=80/tcp
no

查看放出的所有端口

[root@localhost ~]# firewall-cmd --list-ports 
80/tcp