防火墙

linux 防火墙常用命令

端口开放

# 开放
firewall-cmd --permanent --zone=public --add-port=9001/tcp
# 重载
firewall-cmd --reload
# 查看
firewall-cmd --list-all

端口开放IP规则

firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="127.0.0.1/20" port protocol="tcp" port="6002" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="172.22.0.4/20" port protocol="tcp" port="80" accept"