Firewalld操作指南

启动: systemctl start firewalld

关闭: systemctl stop firewalld

开机启用  : systemctl enable firewalld  

开机禁用  : systemctl disable firewalld

查看状态: systemctl status firewalld 

查看区域信息:  firewall-cmd –get-active-zones

查看指定接口所属区域: firewall-cmd –get-zone-of-interface=eth0

拒绝所有包:firewall-cmd –panic-on

取消拒绝状态: firewall-cmd –panic-off

查看拒绝状态: firewall-cmd –query-panic

启动一个服务:systemctl start firewalld.service

关闭一个服务:systemctl stop firewalld.service

重启一个服务:systemctl restart firewalld.service

显示一个服务的状态:systemctl status firewalld.service

在开机时启用一个服务:systemctl enable firewalld.service

在开机时禁用一个服务:systemctl disable firewalld.service

查看服务是否开机启动:systemctl is-enabled firewalld.service

查看已启动的服务:systemctl list-unit-files|grep enabled

查看启动失败的服务:systemctl –failed

查看端口是否开启:firewall-cmd –zone= public –query-port=80/tcp

查看所有已开放端口:firewall-cmd –zone=public –list-ports

开放端口:firewall-cmd –zone=public –add-port=80/tcp –permanent    (permanent永久参数,没有此参数重启后失效,如提示错误则把public删掉再试)

删除端口:firewall-cmd –zone= public –remove-port=80/tcp –permanent

重载防火墙并更新规则:firewall-cmd –reload