firewalld 防火墙相关命令

启动

service firewalld start
​

重启

service firewalld restart
​

关闭

service firewalld stop
​

查看状态

service firewalld status
​

开机禁用

systemctl disable firewalld
​

开机启用

systemctl enable firewalld
​

开放端口

firewall-cmd --permanent --add-port=22/tcp
​

移除端口

firewall-cmd --permanent --remove-port=22/tcp
​

查看开放的端口

firewall-cmd --list-ports
​

仅允许指定 ip 访问指定端口

firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="172.16.1.100" port protocol="tcp" port="1521" accept"
​

移除

firewall-cmd --permanent --remove-rich-rule="rule family="ipv4" source address="172.16.1.100" port protocol="tcp" port="1521" accept"
​

查看当前生效的配置

firewall-cmd --list-all
​