centos7防火墙配置文件控制防火墙策略

1. 配置源文件

/usr/lib/firewalld/services

 

2、目的文件

该目录进行修改配置文件

/etc/firewalld/services

3、例子：

cat /etc/firewalld/zones/public.xml

<?xml version="1.0" encoding="utf-8"?>

<zone>

<short>Public</short>

<rule family="ipv4">

<source address="192.123.17.65/26"/>

<accept/>  

</rule>

<rule family="ipv4">

<port protocol="tcp" port="7011-7012"/>

<accept/>  

</rule>

<rule family="ipv4">

<port protocol="tcp" port="80"/>

<accept/>  

</rule>

</zone>

4、启动与关闭

systemctl restart firewalld.service

systemctl stop firewalld.service

systemctl status firewalld.service

5、检查配置

   查看配置结果

  firewall-cmd --list-all