firewalld 防火墙相关命令

启动

service firewalld start

重启

service firewalld restart

关闭

service firewalld stop

查看状态

service firewalld status

开机禁用

systemctl disable firewalld

开机启用

systemctl enable firewalld

开放端口

firewall-cmd --permanent --add-port=22/tcp

移除端口

firewall-cmd --permanent --remove-port=22/tcp

查看开放的端口

firewall-cmd --list-ports

仅允许指定 ip 访问指定端口

firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="172.16.1.100" port protocol="tcp" port="1521" accept"

移除

firewall-cmd --permanent --remove-rich-rule="rule family="ipv4" source address="172.16.1.100" port protocol="tcp" port="1521" accept"

查看当前生效的配置

firewall-cmd --list-all