參考：
https://blog.csdn.net/bbwangj/article/details/74502967
查看內(nèi)部端口占用情況
netstat -ntlp
systemctl 的基本使用
啟動(dòng)： systemctl start firewalld
關(guān)閉： systemctl stop firewalld
查看狀態(tài)： systemctl status firewalld
開機(jī)禁用 ： systemctl disable firewalld
開機(jī)啟用 ： systemctl enable firewalld
firewalld的基本使用
# 查看防火墻是否開啟
firewall-cmd --state
//查看開放的防火墻端口
firewall-cmd --list-all
//查看某端口防火墻狀態(tài)
firewall-cmd --query-port=8080/tcp
# 開放端口--permanent
firewall-cmd --permanent --add-port=3306/tcp
# 刪除端口
firewall-cmd --zone=public --remove-port=80/tcp --permanent
# 配制后需要重新加載
sudo firewall-cmd --reload
# 放通指定IP192.168.0.73訪問2375端口
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.0.73" port protocol="tcp" port="2375" accept"
# 刪除指定IP192.168.0.73訪問2375端口
firewall-cmd --permanent --remove-rich-rule="rule family="ipv4" source address="192.168.0.73" port protocol="tcp" port="2375" accept"
[root@localhost docker]# firewall-cmd --list-all
public (active)
target: default
icmp-block-inversion: no
interfaces: enp1s0
sources:
services: ssh dhcpv6-client
ports: 80/tcp 8080/tcp 5000/tcp 7072/tcp 7073/tcp 6379/tcp 3306/tcp
protocols:
masquerade: no
forward-ports:
source-ports:
icmp-blocks:
rich rules:
rule family="ipv4" source address="192.168.0.73" port port="2375" protocol="tcp" accept
檢查防火墻狀態(tài)
# 檢查防火墻狀態(tài)
systemctl status firewalld
# 開啟
service firewalld start
# 重啟
service firewalld restart
# 關(guān)閉
service firewalld stop
