centos7查看防火墙状态

查看防火墙状态

[root@VM_0_3_centos /]# firewall-cmd --state
not running
[root@VM_0_3_centos /]# sudo systemctl status firewalld
● firewalld.service - firewalld - dynamic firewall daemon
   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: enabled)
   Active: inactive (dead)
     Docs: man:firewalld(1)

启动防火墙

[root@VM_0_3_centos /]# sudo systemctl start firewalld
[root@VM_0_3_centos /]# sudo systemctl status firewalld
● firewalld.service - firewalld - dynamic firewall daemon
   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: enabled)
   Active: active (running) since Sun 2019-02-03 21:57:37 CST; 2s ago
     Docs: man:firewalld(1)
 Main PID: 20727 (firewalld)
   CGroup: /system.slice/firewalld.service
           └─20727 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid

Feb 03 21:57:36 VM_0_3_centos systemd[1]: Starting firewalld - dynamic firewall daemon...
Feb 03 21:57:37 VM_0_3_centos systemd[1]: Started firewalld - dynamic firewall daemon.
[root@VM_0_3_centos /]#

关闭防火墙

[root@VM_0_3_centos /]# systemctl stop firewalld.service
[root@VM_0_3_centos /]# sudo systemctl start firewalld
[root@VM_0_3_centos /]#

设置防火墙开机启动

root@VM_0_3_centos /]# systemctl enable firewalld.service
Created symlink from /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service to /usr/lib/systemd/system/firewalld.service.
Created symlink from /etc/systemd/system/basic.target.wants/firewalld.service to /usr/lib/systemd/system/firewalld.service.
[root@VM_0_3_centos /]# 

查看端口是否开放

[root@VM_0_3_centos /]# firewall-cmd --query-port=80/tcp
no
[root@VM_0_3_centos /]# 

开放端口

[root@VM_0_3_centos /]# firewall-cmd --zone=public --add-port=80/tcp --permanent
success
[root@VM_0_3_centos /]#

重新加载防火墙

firewall-cmd --reload

查看所有开放的端口

[root@VM_0_3_centos services]# firewall-cmd --zone=public --list-ports
3306/tcp 80/tcp
[root@VM_0_3_centos services]#