#### 查看是否安装防火墙 ~~~ yum list | grep firewalld ~~~ #### 查看是否启动 ~~~ ps -ef | grep firewalld ~~~ #### 安装防火墙 ~~~ yum install firewalld ~~~ #### 启动防火墙 ~~~ service firewalld start ~~~ #### 检查状态 ~~~ service firewalld status ~~~ #### 禁用或关闭防火墙 ~~~ service firewalld stop ~~~ #### 查看版本号 ~~~ firewall-cmd --version ~~~ ~~~ 0.4.4.4 ~~~ #### 查看帮助文档 ~~~ firewall-cmd --help ~~~ #### 查看状态 ~~~ firewall-cmd --state ~~~ ~~~ running //正在运行 ~~~ #### 查看防火墙区域和端口 ~~~ firewall-cmd --get-zones ~~~ ~~~ block dmz drop external home internal public trusted work 有这些区域,用空格隔开的. ~~~ #### 查看默认区域 ~~~ firewall-cmd --get-default-zone ~~~ ~~~ public ~~~ #### 列出所有区域配置情况 ~~~ firewall-cmd --list-all-zones ~~~ ~~~ block target: %%REJECT%% icmp-block-inversion: no interfaces: sources: services: ports: protocols: masquerade: no forward-ports: source-ports: icmp-blocks: rich rules: dmz target: default icmp-block-inversion: no interfaces: sources: services: ssh ports: protocols: masquerade: no forward-ports: source-ports: icmp-blocks: rich rules: drop target: DROP icmp-block-inversion: no interfaces: sources: services: ports: protocols: masquerade: no forward-ports: source-ports: icmp-blocks: rich rules: external target: default icmp-block-inversion: no interfaces: sources: services: ssh ports: protocols: masquerade: yes forward-ports: source-ports: icmp-blocks: rich rules: home target: default icmp-block-inversion: no interfaces: sources: services: ssh mdns samba-client dhcpv6-client ports: protocols: masquerade: no forward-ports: source-ports: icmp-blocks: rich rules: internal target: default icmp-block-inversion: no interfaces: sources: services: ssh mdns samba-client dhcpv6-client ports: protocols: masquerade: no forward-ports: source-ports: icmp-blocks: rich rules: public (active) target: default icmp-block-inversion: no interfaces: ens33 sources: services: ssh dhcpv6-client ports: protocols: masquerade: no forward-ports: source-ports: icmp-blocks: rich rules: trusted target: ACCEPT icmp-block-inversion: no interfaces: sources: services: ports: protocols: masquerade: no forward-ports: source-ports: icmp-blocks: rich rules: work target: default icmp-block-inversion: no interfaces: sources: services: ssh dhcpv6-client ports: protocols: masquerade: no forward-ports: source-ports: icmp-blocks: rich rules: ~~~