注意：firewalld服務(wù)有兩份規則策略配置記錄，配置永久生效的策略記錄時(shí)，需要執行"reload"參數后才能立即生效：
1.查看當前區域
[root@ecs-7bec-0002 bin]# chkconfig iptables offpublic
2.查看防火墻狀態(tài)，需要注意的是，設置端口規則時(shí)防火墻必須是啟動(dòng)狀態(tài)
[root@ecs-7bec-0002 ~]# systemctl status firewalld //返回信息提示防火墻未啟動(dòng)● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: enabled) Active: inactive (dead) //dead代表關(guān)閉狀態(tài) Docs: man:firewalld(1)[root@ecs-7bec-0002 ~]# systemctl start firewalld //啟動(dòng)防火墻[root@ecs-7bec-0002 ~]# systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: enabled) Active: active (running) since Tue 2018-10-09 19:38:36 CST; 2s ago Docs: man:firewalld(1) Main PID: 9269 (firewalld) CGroup: /system.slice/firewalld.service └─9269 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopidOct 09 19:38:36 ecs-7bec-0002 systemd[1]: Starting firewalld - dynamic firewall daemon...Oct 09 19:38:36 ecs-7bec-0002 systemd[1]: Started firewalld - dynamic firewall daemon.
3.配置需要開(kāi)發(fā)的端口
[root@ecs-7bec-0002 ~]# firewall-cmd --zone=public --add-port=端口號/tcp --permanentsuccess
4.執行命令使端口生效
[root@ecs-7bec-0002 ~]# firewall-cmd --reloadsuccess
5.查看端口是否生效
[root@ecs-7bec-0002 ~]# firewall-cmd --zone=public --query-port=端口號/tcpyes
6.防火墻其他操作
[root@ecs-7bec-0002 ~]# firewall-cmd --list-port //查看所有開(kāi)發(fā)端口3306/tcp 80/tcp[root@ecs-7bec-0002 ~]# firewall-cmd --zone=public --remove-port=8080/tcp --permanent 刪除一個(gè)端口success[root@ecs-7bec-0002 ~]# firewall-cmd --reload //使新配置的端口規則生效success[root@ecs-7bec-0002 ~]# firewall-cmd --version //查看版本0.4.3.2[root@ecs-7bec-0002 ~]# firewall-cmd --staterunning[root@ecs-7bec-0002 ~]# firewall-cmd --get-active-zones //查看所在區域public interfaces: eth0
聯(lián)系客服
