linux（centos）防火墙ip和端口访问权限配置

末蓝、 2023-10-03 11:17 15阅读 0赞

这章到这里就结束了，如果觉得学的还不过瘾的话，请移步到：[https://www.processon.com/view/6076a7ffe401fd2d66980f5b][https_www.processon.com_view_6076a7ffe401fd2d66980f5b]

在推荐一款全栈学习地十：[https://www.processon.com/view/60504b5ff346fb348a93b4fa][https_www.processon.com_view_60504b5ff346fb348a93b4fa]

以10.158.90.62服务器为例

##### 一、查看防火墙状态 #####

systemctl status firewalld  
systemctl start firewalld  
systemctl stop firewalld

##### 二、开启防火墙 #####

systemctl restart firewalld

先打开至少两个xsheel访问服务器的窗口，以防开启zone=block后，不能连接服务器  
设置防火墙zone为block  
firewall-cmd --set-default-zone=block (配置文件位置/usr/lib/firewalld/zones)

添加规则

首先添加指定IP(46.79)的22端口可用, 防止连接意外关闭导致不能再次连接服务器

(22端口, ssh用的)  
firewall-cmd --permanent --add-rich-rule=“rule family=“ipv4” source address=“10.158.46.79” port protocol=“tcp” port=“22” accept”  
规则添加后，重载规则，生效  
firewall-cmd --reload

(8888端口, 服务器JBOSS用的)  
firewall-cmd --permanent --add-rich-rule=“rule family=“ipv4” source address=“10.158.46.79” port protocol=“tcp” port=“8888” accept”  
(3306端口, mysql数据库用的)  
firewall-cmd --permanent --add-rich-rule=“rule family=“ipv4” source address=“10.158.46.79” port protocol=“tcp” port=“3306” accept”

firewall-cmd --permanent --add-rich-rule=“rule family=“ipv4” source address=“10.158.90.51” port protocol=“tcp” port=“3306” accept”

firewall-cmd --permanent --add-rich-rule=“rule family=“ipv4” source address=“10.158.90.74” port protocol=“tcp” port=“3306” accept”

firewall-cmd --permanent --add-rich-rule=“rule family=“ipv4” source address=“10.158.46.79” port protocol=“tcp” port=“22” accept”

规则添加后，重载规则，生效  
firewall-cmd --reload

##### 三、查看全部配置 #####

firewall-cmd --list-all

其它规则命令：  
其它规则命令：  
(指定端口所有IP都能访问)给zone=block设置22端口为开放端口，所有IP都可以访问22端口  
firewall-cmd --permanent --zone=block --add-port=22/tcp

查看所有端口配置
    	firewall-cmd --zone=block --list-rich-rules
    
    (指定IP所有端口都能访问)给zone=block设置10.158.90.51能访问所有端口
    firewall-cmd --zone=block --add-rich-rule 'rule family="ipv4" source address="10.158.90.51" accept' --permanent
    
    	查看zone=block已经配置了的规则
    	firewall-cmd --zone=block --list-rich-rules
    
    查看active的zone 
    firewall-cmd   --get-active-zones

[https_www.processon.com_view_6076a7ffe401fd2d66980f5b]: https://www.processon.com/view/6076a7ffe401fd2d66980f5b
[https_www.processon.com_view_60504b5ff346fb348a93b4fa]: https://www.processon.com/view/60504b5ff346fb348a93b4fa