centos7 firewall

memo

centos6のiptablesから移行

service

[code lang=text] <br />[roottk2-234-26965 ] # firewall-cmd --list-all external (default, active) interfaces: eth0 sources: services: ssh ports: masquerade: yes forward-ports: icmp-blocks: rich rules:

[roottk2-234-26965 ] # firewall-cmd --permanent --add-service=http success

[roottk2-234-26965 ] # firewall-cmd --reload success [roottk2-234-26965 ] # firewall-cmd --list-all external (default, active) interfaces: eth0 sources: services: http ssh ports: masquerade: yes forward-ports: icmp-blocks: rich rules:

[/code]

port

# firewall-cmd --permanent --add-port=80/tcp