firewalld常用操作

开机启动的开启与禁止

# 查看开机启动的服务
systemctl list-unit-files | grep enabled

# 设置开机启动
systemctl enable firewalld
# 禁止开机启动
systemctl disable firewalld

基本操作

# 查看状态
systemctl status firewalld
# 启动/停止/重启firewalld
systemctl start firewalld
systemctl stop firewalld
systemctl restart firewalld

服务、端口的添加与删除

# 查看被firewalld允许的服务
firewall-cmd --permanent --list-all

# 添加服务，其实就是开启22端口
firewall-cmd --permanent --add-service=ssh
# 添加端口
firewall-cmd --permanent --add-port=1234/tcp
# 删除服务
firewall-cmd --permanent --remove-service=ssh
# 删除端口
firewall-cmd --permanent --remove-port=1234/tcp

端口转发

# 将80端口转发至8080
firewall-cmd --add-forward-port=port=80:proto=tcp:toport=8080
# 将80端口转发至192.168.0.1
firewall-cmd --add-forward-port=port=80:proto=tcp:toaddr=192.168.0.1
# 将80端口的流量转发至192.168.0.1的8080端口
firewall-cmd --add-forward-port=port=80:proto=tcp:toaddr=192.168.0.1:toport=8080 
# 删除端口转发
firewall-cmd --remove-forward-port=port=80:proto=tcp:toaddr=192.168.0.1

使操作生效

firewall-cmd --reload