centos7 firewalld配置示例

来源：互联网发布：网络电玩数据修改编辑：程序博客网时间：2024/05/21 22:02

firewall-cmd  --permanent --zone=public --add-service=http
firewall-cmd  --permanent --zone=public --add-port=1935/tcp
firewall-cmd  --reload

firewall-cmd --list-all

例如需要开放nfs服务端口

[root@engine data]# firewall-cmd --list-all
public (default, active)
interfaces: eno16777736
sources:
services: dhcpv6-client ovirt-fence-kdump-listener ovirt-http ovirt-https ovirt-vmconsole-proxy ovirt-websocket-proxy ssh
ports:
masquerade: no
forward-ports:
icmp-blocks:
rich rules:

[root@engine data]# firewall-cmd --permanent --zone=public --add-service=nfs
success
[root@engine data]# firewall-cmd --reload
success
[root@engine data]# firewall-cmd --list-all
public (default, active)
interfaces: eno16777736
sources:
services: dhcpv6-client nfs ovirt-fence-kdump-listener ovirt-http ovirt-https ovirt-vmconsole-proxy ovirt-websocket-proxy ssh
ports:
masquerade: no
forward-ports:
icmp-blocks:
rich rules:

例如安装Nagios后，要开放5666端口与服务器连接，命令如下：

[root@centos7-1 ~]# firewall-cmd --add-port=5666/tcp 即时打开，这里也可以是一个端口范围，如1000-2000/tcp
success
[root@centos7-1 ~]# firewall-cmd --permanent --add-port=5666/tcp 写入配置文件
success
[root@centos7-1 ~]# firewall-cmd --reload 重启防火墙
success
[root@centos7-1 ~]#

0 0