centos7 防火墙

启动防火墙：systemctl start firewalld.service

关闭防火墙：systemctl stop firewalld.service

重启防火墙：systemctl restart firewalld.service

显示防火墙服务状态：systemctl status firewalld.service

在开机时启用防火墙服务：systemctl enable firewalld.service

在开机时禁止防火墙服务：systemctl disable firewalld.service

查看防火墙服务是否开机启动：systemctl is-enabled firewalld.service;echo $?

查看已启动的服务列表：systemctl list-unit-files | grep enabled

查看防火墙状态：systemctl status firewalld.service

systemctl list-unit-files | grep firewalld.service

firewall-cmd --state

[ 复制代码

](javascript:void(0); "复制代码")

<pre style="margin-top: 0px; margin-bottom: 0px; white-space: pre-wrap; word-wrap: break-word; box-sizing: border-box; font-family: "Courier New" !important; font-size: 12px !important;">[root@localhost bin]# systemctl status firewalld.service
● firewalld.service - firewalld - dynamic firewall daemon
Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)
Active: active (running) since 二 2018-03-06 23:00:54 CST; 2min 10s ago
Docs: man:firewalld(1)
Main PID: 37299 (firewalld)
Memory: 25.1M CGroup: /system.slice/firewalld.service
└─37299 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid

3月 06 23:00:55 localhost.localdomain firewalld[37299]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -w --table filter --delete INPUT...ailed:
3月 06 23:00:55 localhost.localdomain firewalld[37299]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C FORWARD -i docker0 ...ailed:
3月 06 23:00:55 localhost.localdomain firewalld[37299]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -w --table filter --delete INPUT...ailed:
3月 06 23:00:55 localhost.localdomain firewalld[37299]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C FORWARD -i docker0 ...ailed:
3月 06 23:00:56 localhost.localdomain firewalld[37299]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t nat -C PREROUTING -m addrtype...ailed:
3月 06 23:00:56 localhost.localdomain firewalld[37299]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t nat -C OUTPUT -m addrtype --d...ailed:
3月 06 23:00:56 localhost.localdomain firewalld[37299]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C FORWARD -o docker0 ...ailed:
3月 06 23:00:56 localhost.localdomain firewalld[37299]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C FORWARD -o docker0 ...ailed:
3月 06 23:00:56 localhost.localdomain firewalld[37299]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C FORWARD -j DOCKER-I...ailed:
3月 06 23:00:56 localhost.localdomain firewalld[37299]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -D FORWARD -i docker0 -o docker0...ailed:
Hint: Some lines were ellipsized, use -l to show in full.

[root@localhost bin]# systemctl list-unit-files | grep firewalld.service
firewalld.service enabled

[root@localhost bin]# firewall-cmd --state
running </pre>

[ 复制代码

](javascript:void(0); "复制代码")

查看已经开放的端口

firewall-cmd --list-ports

<pre style="margin-top: 0px; margin-bottom: 0px; white-space: pre-wrap; word-wrap: break-word; box-sizing: border-box; font-family: "Courier New" !important; font-size: 12px !important;">[root@localhost bin]# firewall-cmd --list-ports 8080/tcp</pre>

开启端口

firewall-cmd --zone=public --add-port=8080/tcp --permanent

命令含义：

--zone #作用域

--add-port=8080/tcp #天假端口，格式为：端口/通讯协议

--permanent #永久生效，没有此参数重启后失效

重启防火墙

firewall-cmd --reload