centos7防火墙常用命令

查看状态

firewall-cmd --state
systemctl status firewalld.service

启用防火墙

systemctl enable firewalld.service
或者
systemctl start firewalld

关闭防火墙

systemctl stop firewalld

开放一个端口(22)对任意IP访问的权限

firewall-cmd --zone=public --add-port=22/tcp --permanent

针对某个IP(192.168.102.2)开放某个端口(5601)的访问权限

firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.102.2" port protocol="tcp" port="5601" accept"

重新加载防火墙规则

firewall-cmd --reload

查看对任意IP开放访问的端口

firewall-cmd --permanent --list-port

查看所有规则

firewall-cmd --list-all