Linux firewall settings are easy to set up to ensure server security!

In today's Internet era, server security is highly valued. Among them, firewall is an important part of ensuring server security. Although there are many firewall tools available for Linux systems, Firewalld is the most popular one. This article is designed to help you learn how to use Firewalld firewall under Linux system to protect server security.

1. Basic use of firewalld

启动： systemctl start firewalld

关闭： systemctl stop firewalld

查看状态： systemctl status firewalld

开机禁用 ： systemctl disable firewalld

开机启用 ： systemctl enable firewalld

2. Systemctl is the main tool among the service management tools of CentOS7. It integrates the functions of the previous service and chkconfig.

启动一个服务：systemctl start firewalld.service

关闭一个服务：systemctl stop firewalld.service

重启一个服务：systemctl restart firewalld.service

显示一个服务的状态：systemctl status firewalld.service

在开机时启用一个服务：systemctl enable firewalld.service

在开机时禁用一个服务：systemctl disable firewalld.service

查看服务是否开机启动：systemctl is-enabled firewalld.service

查看已启动的服务列表：systemctl list-unit-files|grep enabled

查看启动失败的服务列表：systemctl --failed

3. Configure firewalld-cmd

查看版本： firewall-cmd --version

查看帮助： firewall-cmd --help

显示状态： firewall-cmd --state

查看所有打开的端口： firewall-cmd --zone=public --list-ports

更新防火墙规则： firewall-cmd --reload

查看区域信息: firewall-cmd --get-active-zones

查看指定接口所属区域： firewall-cmd --get-zone-of-interface=eth0

拒绝所有包：firewall-cmd --panic-on

取消拒绝状态： firewall-cmd --panic-off

查看是否拒绝： firewall-cmd --query-panic

4. How to open a port?

Add to

firewall-cmd --zone=public --add-port=80/tcp --permanent （–permanent永久生效，没有此参数重启后失效）

Reload

firewall-cmd --reload

firewall-cmd --zone=public --query-port=80/tcp

firewall-cmd --zone=public --remove-port=80/tcp --permanent

Whether you are a system administrator looking for a new Linux firewall solution, or a developer who wants to better understand server security, I believe this article will be very useful to you. All in all, using Firewalld firewall makes it easy to protect your server from cyberattacks. We strongly recommend that you research and apply the knowledge described in this article to ensure your server has the best possible security performance on your network.

The above is the detailed content of Linux firewall settings are easy to set up to ensure server security!. For more information, please follow other related articles on the PHP Chinese website!