Linux firewall-cmd --list-all

1. Version 확인  cat /etc/*release*

lsof -p PID

 

rpm -ql postfix |grep conf

 

[root@ahn_test ~]# rpm -qa | grep tcpdump

tcpdump-4.9.2-4.el7_7.1.x86_64

[root@ahn_test ~]#

[root@ahn_test ~]# yum install tcpdump

 

1. 방화벽 확인

https://www.lesstif.com/system-admin/rhel-centos-firewall-22053128.html

centOS 6버전까지는 iptable를 사용하다가 7버전부터 firewalld를 사용

 

[root@localhost ~]# firewall-cmd --list-all

public (active)

  target: default

  icmp-block-inversion: no

  interfaces: eno1 eno2

  sources:

  services: dhcpv6-client

  ports: 62000/tcp 62002/tcp 62004/tcp 62006/tcp 8080/tcp 8090/tcp

  protocols:

  masquerade: no

  forward-ports:

  source-ports:

  icmp-blocks:

  rich rules:

        rule family="ipv4" source address="192.0.0.1/32" accept

        rule family="ipv4" source address="192.0.0.2/32" accept

 

 

firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address="192.168.0.101/32" accept'

firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address=192.168.0.102 accept'

firewall-cmd --permanent --remove-rich-rule='rule family="ipv4" source address=192.168.0.102 accept'

sudo firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address=192.168.0.100 reject' #--> 피드백 보내줌

sudo firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address=192.168.0.100 drop' #--> 피드백 없음

 

sudo firewall-cmd --permanent --remove-rich-rule='rule family="ipv4" source address=192.168.0.100 reject '#--> 피드백보줌

sudo firewall-cmd --permanent --remove-rich-rule='rule family="ipv4" source address=192.168.0.100 drop' #--> 피드백 없음

 

 

firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address="192.168.0.3/32" accept'

 

  196  firewall-cmd --list-ports

  197  systemctl status firewalld

  198  systemctl stop firewalld

  199  systemctl disable firewalld

  200  systemctl start firewalld

  201  firewall-cmd --reload

  202  firewalld-cmd --list-ports

  203  firewall-cmd --list-ports

  204  firewall-cmd --permanent --zone=public --add-port=62000/tcp

  205  firewall-cmd --list-ports

  206  firewall-cmd --permanent --zone=public --add-port=62002/tcp

  207  firewall-cmd --permanent --zone=public --add-port=62004/tcp

  208  firewall-cmd --permanent --zone=public --add-port=62006/tcp

  209  firewall-cmd --permanent --zone=public --add-port=8080/tcp

  210  firewall-cmd --permanent --zone=public --add-port=8090/tcp

  211  ps -ef | grep tomcat

 

firewall-cmd --permanent --zone=public --add-port=5201/tcp

 

firewall-cmd --permanent --zone=public --add-port=19443/tcp

 

  212  firewall-cmd --reload

  213  firewall-cmd --list-ports