Centos7

Centos7 的firewalld 取代了iptables

查看开放端口

firewall-cmd@H_404_13@ --@H_404_13@list@H_404_13@-ports@H_404_13@

开启端口

firewall@H_404_13@-@H_404_13@cmd@H_404_13@ -@H_404_13@-@H_404_13@zone=public@H_404_13@ -@H_404_13@-@H_404_13@add@H_404_13@-@H_404_13@port=80/tcp@H_404_13@ -@H_404_13@-@H_404_13@permanent@H_404_13@

开启范围端口 8080 - 9090范围的端口

firewall@H_404_13@-@H_404_13@cmd@H_404_13@  -@H_404_13@-@H_404_13@zone=public@H_404_13@  -@H_404_13@-@H_404_13@add@H_404_13@-@H_404_13@port=8080@H_404_13@-@H_404_13@9090/tcp@H_404_13@ -@H_404_13@-@H_404_13@permanent@H_404_13@

命令含义

–zone                          #作用域@H_404_13@
–add@H_404_13@-port=80@H_404_13@/tcp               #添加端口，格式为：端口/通讯协议@H_404_13@
–permanent                     #永久生效，没有此参数重启后失效@H_404_13@

防火墙命令

firewall-cmd --reload                  #重启firewall@H_404_13@
firewall-cmd  --state                  #查看防火墙状态@H_404_13@
systemctl start firewalld.service@H_404_13@      #开启firewall@H_404_13@
systemctl stop firewalld.service@H_404_13@       #停止firewall@H_404_13@
systemctl disable firewalld.service@H_404_13@    #禁止firewall开机启动@H_404_13@

Centos6

#查看开放端口@H_404_13@
service iptables status

#开启8080端口 @H_404_13@
/sbin/iptables -I INPUT @H_404_13@-p tcp --dport 8080@H_404_13@ -j ACCEPT

#开启命令: @H_404_13@
service iptables start

#关闭命令: @H_404_13@
service iptables stop 

#永久关闭防火墙：@H_404_13@
chkconfig iptables off

可能发生的异常

1.启动或者关闭防火墙没任何的提示

[root@ethnicity@H_404_13@ ~]# service iptables start@H_404_13@
[root@ethnicity@H_404_13@ ~]# service iptables stop@H_404_13@

2.查看防火墙的状态直接提示模块未加载

[root@ethnicity@H_404_13@ ~]# service iptables status@H_404_13@
iptables:@H_404_13@ Firewall@H_404_13@ modules are not@H_404_13@ loaded.

修复方法

modprobe  ip_tables  #加载ip_tables模块@H_404_13@
modprobe  iptable_filter  #加载iptable_filter模块@H_404_13@
[root@ethnicity@H_404_13@ ~]# lsmod | grep iptable #查看模块，有模块即解决了@H_404_13@
iptable_filter          2173@H_404_13@  0@H_404_13@ 
ip_tables               9567@H_404_13@  1@H_404_13@ iptable_filter