一、firewalld

systemctl status firewalld //查看狀態(tài)
systemctl stop firewalld //臨時(shí)關(guān)閉
systemctl disable firewalld //永久關(guān)閉

二、iptables

yum install iptables-services // 安裝
systemctl enable iptables.service //相當(dāng)于以前的chkconfig iptables on
systemctl start iptables.service //開啟服務(wù)
systemctl status iptables.service //查看狀態(tài)
service iptables save && systemctl restart iptables.service //重啟防火墻

三、case

iptables -I INPUT -p tcp --dport 80 -j DROP //關(guān)閉所有的80端口
iptables -I INPUT -s 192.168.1.0/24 -p tcp --dport 80 -j ACCEPT //開啟ip段192.168.1.0/24端的80口
iptables -I INPUT -s 211.123.16.123/24 -p tcp --dport 80 -j ACCEPT //開啟ip段211.123.16.123/24端ip段的80口
iptables -I INPUT -s 58.241.16.252 -p tcp --dport 33600 -j ACCEPT //向58.241.16.252開放33600端口
iptabels -A INPUT -p tcp -s 10.10.11.0/24 --dport 1024:65535-j ACCEPT //端口范圍開通

四、doc

https://cloud.tencent.com/developer/article/1404092
https://www.cnblogs.com/clouders/p/6544584.html
https://www.cnblogs.com/kreo/p/4368811.html
http://www.zsythink.net/archives/1199/