amanda-client.xml freeipa-ldap.xml ipp.xml libvirt.xml pmcd.xml RH-Satellite-6.xml tftp-client.xml
bacula-client.xml freeipa-replication.xml ipsec.xml mdns.xml pmproxy.xml rpc-bind.xml tftp.xml
bacula.xml ftp.xml iscsi-target.xml mountd.xml pmwebapis.xml rsyncd.xml transmission-client.xml
dhcpv6-client.xml high-availability.xml kerberos.xml ms-wbt.xml pmwebapi.xml samba-client.xml vdsm.xml
dhcpv6.xml https.xml kpasswd.xml mysql.xml pop3s.xml samba.xml vnc-server.xml
dhcp.xml http.xml ldaps.xml nfs.xml postgresql.xml smtp.xml wbem-https.xml
dns.xml imaps.xml ldap.xml ntp.xml proxy-dhcp.xml ssh.xml
freeipa-ldaps.xml ipp-client.xml libvirt-tls.xml openvpn.xml radius.xml telnet.xml
添加或删除允许的服务，重新启动系统后，更改将恢复 。如果永久更改设置，请添加“--permanent”选项 。
#以添加http服务为例
[root@vdevops ~]# firewall-cmd --add-service=http
success
[root@vdevops ~]# firewall-cmd --list-service
http ssh
#移除添加的http
[root@vdevops ~]# firewall-cmd --remove-service=http
success
[root@vdevops ~]# firewall-cmd --list-service
ssh
#添加http服务，永久生效
[root@vdevops ~]# firewall-cmd --add-service=http --permanentsuccess
[root@vdevops ~]# firewall-cmd --reloadsuccess[root@vdevops ~]# firewall-cmd --list-servicehttp ssh
添加和移除端口
[root@vdevops ~]# firewall-cmd --add-port=465/tcp #添加端口
success
[root@vdevops ~]# firewall-cmd --list-port
465/tcp
[root@vdevops ~]# firewall-cmd --remove-port=465/tcp #移除端口
success
[root@vdevops ~]# firewall-cmd --list-port
[root@vdevops ~]# firewall-cmd --add-port=465/tcp --permanent #添加端口，永久生效
success
[root@vdevops ~]# firewall-cmd --reload
success
[root@vdevops ~]# firewall-cmd --list-port
465/tcp
加或删除禁止的ICMP类型
[root@dlp ~]# firewall-cmd --add-icmp-block=echo-request #添加禁止回应请求
success
[root@dlp ~]# firewall-cmd --list-icmp-blocks
echo-request
[root@dlp ~]# firewall-cmd --remove-icmp-block=echo-request #移除添加的参数
success
[root@dlp ~]# firewall-cmd --list-icmp-blocks
[root@dlp ~]# firewall-cmd --get-icmptypes #显示ICMP支持的功能
destination-unreachable echo-reply echo-request parameter-problem redirect
router-advertisement router-solicitation source-quench time-exceeded
【2】如果不需要防火墙服务，关闭如下
[root@vdevops ~]# systemctl stop firewalld #停止防火墙服务
[root@vdevops ~]# systemctl disable firewalld #禁止防火墙开机自启
Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.
Removed symlink /etc/systemd/system/basic.target.wants/firewalld.service.
【3】SELinux设置
[root@vdevops ~]# getenforce #查看SELINUX工作模式
Enforcing
[root@vdevops ~]# sed -i 's/SELINUX=Enforcing/SELINUX=disabled/' /etc/selinux/config #禁用SELINUX
[root@vdevops ~]# setenforce 0 #临时禁用SELINUX，无需重启
【4】网络设置
1、设置静态IP和改变接口名称
[root@vdevops ~]# nmcli c modify eno16777736 ipv4.addresses 10.1.1.56/24 #设置静态IP
[root@vdevops ~]# nmcli c modify eno16777736 ipv4.gateway 10.1.1.1 #设置网关
[root@vdevops ~]# nmcli c modify eno16777736 ipv4.dns 10.1.1.1 #设置DNS
[root@vdevops ~]# nmcli c modify eno16777736 ipv4.method manual #设置ipv4的类型为静态
[root@vdevops ~]# nmcli c down eno16777736;nmcli c up eno16777736 #重启网络接口
Connection 'eno16777736' successfully deactivated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/0)
Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/1)
[root@vdevops ~]# nmcli d show eno16777736 #查看网络接口状态
GENERAL.DEVICE: eno16777736
GENERAL.TYPE: ethernet
GENERAL.HWADDR: 00:0C:29:B6:F5:5E
GENERAL.MTU: 1500
GENERAL.STATE: 100 (connected)
GENERAL.CONNECTION: eno16777736
GENERAL.CON-PATH: /org/freedesktop/NetworkManager/ActiveConnection/1
WIRED-PROPERTIES.CARRIER: on
IP4.ADDRESS[1]: 10.1.1.56/24
IP4.GATEWAY: 10.1.1.1
IP4.DNS[1]: 10.1.1.1
IP6.ADDRESS[1]: fe80::20c:29ff:feb6:f55e/64
IP6.GATEWAY:
[root@vdevops ~]# ip addr show #查看IP状态
1: lo:
mtu 65536 qdisc noqueue state UNKNOWNlink/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00inet 127.0.0.1/8 scope host lovalid_lft forever preferred_lft foreverinet6 ::1/128 scope hostvalid_lft forever preferred_lft forever2: eno16777736:
mtu 1500 qdisc pfifo_fast state UP qlen 1000link/ether 00:0c:29:b6:f5:5e brd ff:ff:ff:ff:ff:ffinet 10.1.1.56/24 brd 10.1.1.255 scope global eno16777736valid_lft forever preferred_lft foreverinet6 fe80::20c:29ff:feb6:f55e/64 scope linkvalid_lft forever preferred_lft forever
推荐阅读
- 超详细hadoop集群安装配置教程 搭建hadoop集群
- 打印机安装了连供，墨水不进墨盒怎么办 连供墨水怎么加墨
- qq游戏下载安装？qq游戏大厅热血合击哪个地图挂机好?
- 卫生间马桶这样装才是正确流程 马桶安装方法
- 便携式导航安装道道通地图 道道通导航地图下载
- 马桶盖掉了怎么安装？ 马桶盖安装
- 郑西鑫苑名家四期——成都鑫苑名家一期到哪里去安装wifi？
- flash安装包加安装教程 安装flash player
- xp装win7双系统详细图文教程 xp下安装win7
- 水电安装工程师岗位职责及薪资待遇 安装工程师岗位职责