启动一个服务:systemctl start firewalld.service 关闭一个服务:systemctl stop firewalld.service 重启一个服务:systemctl restart firewalld.service 显示一个服务的状态:systemctl status firewalld.service 在开机时启用一个服务:systemctl enable firewalld.service 在开机时禁用一个服务:systemctl disable firewalld.service 查看服务是否开机启动:systemctl is-enabled firewalld.service 查看已启动的服务列表:systemctl list-unit-files|grep enabled 查看启动失败的服务列表:systemctl --failed
3.配置firewalld-cmd
#! /bin/bash basepath=$(cd `dirname $0`; pwd)
#根据入参是close还是open决定是关闭还是开启配置的端口 #调用firewalld_tool.sh按照格式 bash firewalld_tool.sh open/close [PORT/tcp|udp] [PORT/tcp|udp].. 来执行
if [ $1 = "open" ]; then
sh ${basepath}/firewalld_tool.sh open 6501/tcp 6500/tcp 9582/tcp 9582/udp 443/tcp 61616/tcp 7200/tcp 7200/udp 7201/tcp 7201/udp 8833/tcp 8833/udp 8201/tcp 8201/udp 8301/tcp 8301/udp 5432/tcp 5432/udp 7210/udp
elif [ $1 = "close" ]; then
sh ${basepath}/firewalld_tool.sh close 6501/tcp 6500/tcp 9582/tcp 9582/udp 443/tcp 61616/tcp 7200/tcp 7200/udp 7201/tcp 7201/udp 8833/tcp 8833/udp 8201/tcp 8201/udp 8301/tcp 8301/udp 5432/tcp 5432/udp 7210/udp else echo"not correct args" exit 0 fi
开启和关闭端口的脚本
#! /bin/bash -xe
FIREWALLD_STAT=$(systemctl status firewalld | egrep -i -c "running")
ARGS=($*)
ZONE=$(firewall-cmd --get-default-zone)
if [ ${FIREWALLD_STAT} = "1" ]; then
echo "The Service Firewalld is running!" else echo "The Service Firewalld is not running!"
exit 0
fi
Usage() {
echo "Usage: $0:" echo "1. Config Firewalld for one port open: sudo bash $0 open/close [PORT/tcp|udp]."
echo "2. Config Firewalld for more ports open: sudo bash $0 open/close [PORT/tcp|udp] [PORT/tcp|udp]." }
if [ $# -lt 1 ]; then
Usage
exit 0
fi
Open_Ports()
{ for port in ${ARGS[@]} do echo "Opening firewalld for port: ${port}" firewall-cmd --zone=${ZONE} --add-port=${port} --permanent done # Reload Firewall configuration firewall-cmd --reload }
Close_Ports()
{ for port in ${ARGS[@]}
do
echo "Closing firewalld for port: ${port}"
firewall-cmd --zone=${ZONE} --remove-port=${port} --permanent
done
firewall-cmd --reload
}
if [ $1 = "open" ]; then
shift ARGS=($*) Open_Ports
elif [ $1 = "close" ]; then
shift ARGS=($*) Close_Ports
else Usage
exit 0
fi