Linux 上的 firewall 和 UFW 命令

1

firewall-cmd --list-ports

1
2
3
4
5

firewall-cmd --zone=public --add-port=80/tcp --permanent
firewall-cmd --zone=public --add-port=22/tcp --permanent
firewall-cmd --zone=public --add-port=22/udp --permanent

firewall-cmd --permanent --zone=public --add-port=39000-40000/tcp --permanent

1
2
3

firewall-cmd --reload                        #重启firewall
systemctl stop firewalld.service             #停止firewall
systemctl disable firewalld.service          #禁止firewall开机启动

1
2

firewall-cmd --zone=public --remove-port=22/tcp --permanent
firewall-cmd --zone=public --remove-port=22/udp --permanent

1

ufw status

1

ufw allow 22

1

ufw allow 80/tcp

1

ufw allow from 192.168.1.2 to any port 3306

1

ufw deny 25

1

ufw delete allow 22

1
2

ufw status numbered
ufw delete [number]

1

ufw allow OpenSSH

1

ufw allow from 192.168.1.0/24

1

ufw allow from 192.168.1.0/24 to any port 80

1

ufw limit 22

1

ufw allow in on lo

1

ufw default deny incoming

1

ufw default allow outgoing

1

ufw status numbered

1

ufw reset

1

ufw app list

1

ufw logging on

1

ufw logging off

1

ufw show raw

1

ufw ipv6 enable

1

ufw ipv6 disable

1

ufw allow in on eth0 to any port 22

1

ufw reject Apache

1

ufw allow 'Nginx Full'

1

ufw show added

1

ufw insert 1 allow 8080