一、firewall.service
#开启防火墙
$ systemctl start firewalld.service
#开启防火墙
$ systemctl stop firewalld.service
#查看防火墙状态
$ systemctl status firewalld.service
firewalld.service - firewalld - dynamic firewall daemon
Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: >
Active: active (running) since Thu 2020-05-21 12:37:48 EDT; 10min ago
Docs: man:firewalld(1)
Main PID: 8476 (firewalld)
Tasks: 2 (limit: 4884)
Memory: 2.8M
CGroup: /system.slice/firewalld.service
└─8476 /usr/libexec/platform-python -s /usr/sbin/firewalld --nofork --nopid
5月 21 12:37:50 node1 firewalld[8476]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w>
5月 21 12:37:50 node1 firewalld[8476]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w>
5月 21 12:37:50 node1 firewalld[8476]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w>
5月 21 12:37:50 node1 firewalld[8476]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w>
5月 21 12:37:50 node1 firewalld[8476]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w>
5月 21 12:37:50 node1 firewalld[8476]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w>
5月 21 12:37:50 node1 firewalld[8476]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w>
5月 21 12:37:50 node1 firewalld[8476]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w>
5月 21 12:37:51 node1 firewalld[8476]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w>
5月 21 12:37:51 node1 firewalld[8476]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w>
二、查看firewall的所有信息或放通端口
#查看信息
[owl314@node1 ~]$ firewall-cmd --list-all
public (active)
target: default
icmp-block-inversion: no
interfaces: ens33
sources:
services: cockpit dhcpv6-client ssh
ports:
protocols:
masquerade: no
forward-ports:
source-ports:
icmp-blocks:
rich rules:
rule family="ipv4" source address="172.17.0.0/16" accept
rule family="ipv4" source address="172.27.0.0/16" accept
#查看放通端口
[owl314@node1 ~]$ firewall-cmd --list-ports
2376/tcp
三、放通端口
#放通2376端口
[owl314@node1 ~]$ firewall-cmd --zone=public --add-port=2376/tcp --permanent
success
#重启firewal后修改才生效
[owl314@node1 ~]$ systemctl restart firewalld.service
[owl314@node1 ~]$ firewall-cmd --list-ports
2376/tcp
