防火墙

1.启动,关闭firewalld.service

# systemctl start firewalld.service
# systemctl stop firewalld.service
# systemctl restart firewalld.service

2.添加端口

# firewall-cmd --zone=public --add-port=80/tcp --permanent
# firewall-cmd --reload

3.查看端口和协议

# firewall-cmd --list-port

4.删除端口

# firewall-cmd --zone=public --remove-port=80/tcp --permanent
# firewall-cmd --reload

5.其它

查看指定级别的所有信息

# firewall-cmd --zone=public --list-all

查看所有级别被允许的信息

# firewall-cmd --get-service

端口转发:转发 tcp 22 端口至 3753

# firewall-cmd --zone=external --add-masquerade
# firewall-cmd --zone=external --add-forward-port=port=22:proto=tcp:toport=3753