[centos7] 방화벽 설정하기

방화벽 설치

# yum install firewalld

# systemctl start firewalld

# systemctl enable firewalld

 

설정파일위치

/etc/firewalld/zones/public.xml

 

상태확인

# firewall-cmd --state

 

재구동

# firewall-cmd --reload

 

존목록

# firewall-cmd --get-zone

# firewall-cmd --list-all-zones

# firewall-cmd --get-default-zone

# firewall-cmd --get-active-zone

 

포트,서비스목록

# firewall-cmd --list-ports

# firewall-cmd --get-services

# firewall-cmd --permanent --list-all

 

포트추가/삭제

# firewall-cmd --zone=public --add-port=8080/tcp

# firewall-cmd --zone=public --remove-port=8080/tcp

 

아이피 추가/삭제 (룰 추가)

# firewall-cmd --permanent --zone=public --add-rich-rule="rule family=ipv4 source address=0.0.0.0/32 port protocol=tcp port=1234 accept"

# firewall-cmd --permanent --zone=public --remove-rich-rule="rule family=ipv4 source address=0.0.0.0/32 port protocol=tcp port=1234 accept"

 

차단룰 예시 ( 1.2.3.4 아이피 웹 차단 시키기)

#  firewall-cmd --permanent --zone=public --add-rich-rule="rule family=ipv4 source address=1.2.3.4 service name=http reject"

# firewall-cmd --reload