Linux防火墙常用命令之firewalld

• 查看防火墙状态

sudo firewall-cmd --state

或者

sudo systemctl status firewalld

• 启动防火墙

sudo systemctl start firewalld

• 重启防火墙

sudo systemctl restart firewalld

• 关闭防火墙

sudo systemctl stop firewalld

• 查看防火墙放行的端口

sudo firewall-cmd --list-ports

• 添加新的放行端口(重启防火墙后生效)

firewall-cmd --zone=public --add-port=8080/tcp --permanent

• 放行新端口后重启防火墙

systemctl restart firewalld

• 针对IP放行端口

firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.10.163" port protocol="tcp" port="445" accept"

• 添加多个放行端口(重启防火墙后生效)

sudo firewall-cmd --zone=public --add-port=**/tcp --permanent
#重启防火墙
sudo systemctl restart firewalld

• 关闭某个端口(重启防火墙后生效)

sudo firewall-cmd --zone=public --remove-port=8080/tcp --permanent
#重启防火墙
 systemctl restart firewalld

• 查看某个端口是否被占用

netstat -lntp |grep 8080

• 重新载入

firewall-cmd --reload