centos7 firewalld配置示例

firewall-cmd --permanent --zone=public --add-service=http

firewall-cmd --permanent --zone=public --add-port=1935/tcp

firewall-cmd --reload

firewall-cmd --list-all

例如需要开放nfs服务端口

[root@engine data]# firewall-cmd --list-all

public (default, active)

interfaces: eno16777736

sources:

services: dhcpv6-client ovirt-fence-kdump-listener ovirt-http ovirt-https ovirt-vmconsole-proxy ovirt-websocket-proxy ssh

ports:

masquerade: no

forward-ports:

icmp-blocks:

rich rules:

[root@engine data]# firewall-cmd --permanent --zone=public --add-service=nfs

success

[root@engine data]# firewall-cmd --reload

success

[root@engine data]# firewall-cmd --list-all

public (default, active)

interfaces: eno16777736

sources:

services: dhcpv6-client nfs ovirt-fence-kdump-listener ovirt-http ovirt-https ovirt-vmconsole-proxy ovirt-websocket-proxy ssh

ports:

masquerade: no

forward-ports:

icmp-blocks:

rich rules:

例如安装Nagios后，要开放5666端口与服务器连接，命令如下：

[root@centos7-1 ~]# firewall-cmd --add-port=5666/tcp 即时打开，这里也可以是一个端口范围，如1000-2000/tcp

success

[root@centos7-1 ~]# firewall-cmd --permanent --add-port=5666/tcp 写入配置文件

success

[root@centos7-1 ~]# firewall-cmd --reload 重启防火墙

success

[root@centos7-1 ~]#