CentOS7防火墙

最新推荐文章于 2025-07-18 11:53:26 发布

野生程序猿_天空蓝色

最新推荐文章于 2025-07-18 11:53:26 发布

阅读量515

点赞数

CC 4.0 BY-SA版权

分类专栏： Linux 文章标签： CentOS7 firewall

本文链接：https://blog.youkuaiyun.com/qq_26346457/article/details/79737365

Linux 专栏收录该内容

12 篇文章

订阅专栏

本文介绍了如何在CentOS7中操作firewalld服务，包括重启、启动、关闭防火墙，查看防火墙规则，以及添加和删除端口。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

CentOS7的firewall

防火墙重启

service firewalld restart

防火墙启动

service firewalld start

防火墙关闭

service firewalld stop

查看防火墙的清单

firewall-cmd --list-all

增加端口

firewall-cmd --zone=public --add-port=27017/tcp --permanent

删除端口

firewall-cmd --zone=public --remove-port=27017/tcp --permanent

查看端口

firewall-cmd --zone=public --query-port=27017/tcp

[root@localhost x]# firewall-cmd --list-all
public (active)
  target: default
  icmp-block-inversion: no
  interfaces: ens33
  sources: 
  services: ssh dhcpv6-client
  ports: 
  protocols: 
  masquerade: no
  forward-ports: 
  source-ports: 
  icmp-blocks: 
  rich rules: 

[root@localhost x]# service firewalld stop
Redirecting to /bin/systemctl stop firewalld.service
[root@localhost x]# service firewalld start
Redirecting to /bin/systemctl start firewalld.service
[root@localhost x]# service firewalld restart
Redirecting to /bin/systemctl restart firewalld.service
[root@localhost x]# firewall-cmd --zone=public --add-port=27017/tcp --permanent 
success
[root@localhost x]# service firewalld restart
Redirecting to /bin/systemctl restart firewalld.service
[root@localhost x]# firewall-cmd --list-all
public (active)
  target: default
  icmp-block-inversion: no
  interfaces: ens33
  sources: 
  services: ssh dhcpv6-client
  ports: 27017/tcp
  protocols: 
  masquerade: no
  forward-ports: 
  source-ports: 
  icmp-blocks: 
  rich rules: 

[root@localhost x]# firewall-cmd --zone=public --remove-port=27017/tcp --permanent
success
[root@localhost x]# service firewalld restart
Redirecting to /bin/systemctl restart firewalld.service
[root@localhost x]# firewall-cmd --list-all
public (active)
  target: default
  icmp-block-inversion: no
  interfaces: ens33
  sources: 
  services: ssh dhcpv6-client
  ports: 
  protocols: 
  masquerade: no
  forward-ports: 
  source-ports: 
  icmp-blocks: 
  rich rules: 

[root@localhost x]# firewall-cmd --zone=public --add-port=27017/tcp --permanent
success
[root@localhost x]# service firewalld restart
Redirecting to /bin/systemctl restart firewalld.service
[root@localhost x]# firewall-cmd --list-all
public (active)
  target: default
  icmp-block-inversion: no
  interfaces: ens33
  sources: 
  services: ssh dhcpv6-client
  ports: 27017/tcp
  protocols: 
  masquerade: no
  forward-ports: 
  source-ports: 
  icmp-blocks: 
  rich rules: 
[root@localhost x]# firewall-cmd --zone=public --list-ports
27017/tcp
[root@localhost x]# firewall-cmd --zone=public --query-port=27017/tcp
yes