CentOS 防火墙恢复配置步骤
一、操作前准备
sudo firewall-cmd --runtime-to-permanent(将当前运行时规则写入永久区)sudo cp -a /etc/firewalld /root/firewalld-$(date +%F)sudo iptables-save > /root/iptables-$(date +%F).rules二、场景化恢复步骤
sudo systemctl status firewalld(若未安装:sudo yum install -y firewalld)sudo firewall-cmd --reloadsudo cp -a /root/firewalld-YYYY-MM-DD /etc/firewalld && sudo firewall-cmd --reloadfirewall-cmd --state、firewall-cmd --list-allsudo systemctl stop iptables && sudo systemctl mask iptablessudo systemctl unmask firewalld && sudo systemctl start firewalldsudo systemctl enable firewalldfirewall-cmd --state、firewall-cmd --list-allsudo firewall-cmd --complete-reloadsudo firewall-cmd --permanent --zone=public --add-service=sshsudo firewall-cmd --permanent --zone=public --add-service=httpsudo firewall-cmd --permanent --zone=public --add-service=httpssudo firewall-cmd --reloadfirewall-cmd --list-services、firewall-cmd --list-portssudo yum install -y iptables-servicessudo iptables-restore < /root/iptables-YYYY-MM-DD.rulessudo service iptables save(或 sudo /usr/libexec/iptables/iptables.init save)sudo systemctl start iptables && sudo systemctl enable iptablessudo iptables -L -n -v三、验证与回滚
firewall-cmd --state、firewall-cmd --list-all、firewall-cmd --query-port=80/tcpsudo iptables -L -n -v、sudo iptables -Ssudo cp -a /root/firewalld-YYYY-MM-DD /etc/firewalld && sudo firewall-cmd --reloadsudo iptables-restore < /root/iptables-YYYY-MM-DD.rulessudo tail -f /var/log/firewalld。四、常用命令速查
sudo systemctl start|stop|restart|enable|disable firewalldsudo firewall-cmd --reload、firewall-cmd --state、systemctl status firewalldfirewall-cmd --permanent --zone=public --add-port=80/tcp、firewall-cmd --permanent --zone=public --add-service=https、firewall-cmd --permanent --zone=public --remove-port=80/tcp、firewall-cmd --query-port=80/tcp、firewall-cmd --list-ports、firewall-cmd --list-servicessudo systemctl start|stop|restart|enable|disable iptables、sudo service iptables savesudo iptables-save > file.rules、sudo iptables-restore < file.rulessudo iptables -L -n -v、sudo iptables -S