Linux防火墙限制访问服务器IP和端口

Linux防火墙限制访问服务器IP和端口

笔记

逐行执行命令

firewall-cmd --state
systemctl start firewalld
systemctl enable firewalld
firewall-cmd --get-default-zone

firewall-cmd --set-default-zone=trusted

firewall-cmd --permanent --new-zone=ss
firewall-cmd --permanent --zone=ss --add-source=IP
firewall-cmd --permanent --zone=ss --add-port=端口/tcp
firewall-cmd --permanent --zone=trusted --add-rich-rule="rule family=ipv4 port protocol=tcp port=端口 drop"

firewall-cmd --reload

查看

firewall-cmd --get-active-zone
firewall-cmd --list-all
firewall-cmd --zone=ss --list-all