Centos 7之Firewalld相關(guān)命令詳細介紹

引言：Centos 7是目前非常流行的Linux發(fā)行版本，本文將重點介紹如何來使用firewalld相關(guān)命令啟動服務以及添加服務或者端口等操作。

1.  查看firewall服務狀態(tài)

  >>  systemctl status firewalld

[root@flybird ~]# systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: enabled)   Active: inactive (dead) 

 顯示當前的firewall并未啟動

2.  啟動/關(guān)閉firewall

  >> systemctl start/stop firewalld

root@flybird ~]# systemctl start firewalld [root@flybird ~]# systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: enabled)   Active: active (running) since Fri 2016-12-02 23:17:09 CST; 11s ago  Main PID: 1279 (firewalld)   CGroup: /system.slice/firewalld.service       └─1279 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid 

3.  禁用或者啟用firewall

  >> systemctl disable/enable firewalld

4.  查看端口是否開放

  >>> firewall-cmd --query-port=8020/tcp

5. 新增開發(fā)端口

  >> firewall-cmd --add-port=5000/tcp --permanent

[root@flybird ~]# firewall-cmd --query-port=5000/tcp no [root@flybird ~]# firewall-cmd --add-port=5000/tcp --permanent success 

6.  關(guān)于服務

  >> firewall-cmd --add-service=ftp --permanent

  >> firewall-cmd --remove-service=ftp --permanent

7.  查看firewall狀態(tài)

   >> firewall-cmd --status

   >>  systemctl status firewalld

8. 查看 firewall目前開放的內(nèi)容

   >> firewall-cmd --list-all

[root@flybird ~]# firewall-cmd --list-all public (default)  interfaces:   sources:   services: dhcpv6-client http ssh  ports: 443/tcp 80/tcp 3306/tcp 6739/tcp 10051/tcp 10050/tcp  masquerade: no  forward-ports:   icmp-blocks:   rich rules:  

9.  查看開發(fā)的端口

  >> firewall-cmd --list-port

10. 查看firewall-cmd命令的使用說明

   >> firewall-cmd --help

感謝閱讀，希望能幫助到大家，謝謝大家對本站的支持！