firewalld

firewall-cmd -h –help 显示帮助

firewall-cmd –state 显示firewalld状态

firewall-cmd –reload 热加载（不中断服务）

firewall-cmd –complete-reload 冷加载（中断所有连接重新加载）

firewall-cmd –runtime-to-permanent 将当前规则永久保存

firewall-cmd –check-config 检查配置时候正确

firewall-cmd –get-log-denied 获取被拒绝的日志

配置firewalld

firewall-cmd –zone=public –add-interface=eth0 –permanent将接口添加在区域，默认接口都在public

firewall-cmd –set-default-zone=public设置默认接口区域

firewall-cmd –zone=public –list-ports显示所有打开的端口

firewall-cmd –zone=public –add-port=80/tcp –permanent加入一个端口到区域并永久生效

firewall-cmd –zone=public –remove-port=80/tcp 删除服务

firewall-cmd –get-services显示服务

firewall-cmd –new-service=ssh允许ssh服务通过

firewall-cmd –delete-service=ssh禁止ssh服务通过

firewall-cmd –enable ports=80/tcl打开80端口

firewall-cmd –add-port=80/tcp打开80端口

firewall-cmd –add-service=ssh 开放shh端口

firewall-cmd –remove-service=ssh阻止ssh端口

firewall-cmd –list-all查看防火墙