02. CentOS 포트열기

$ vi /etc/firewalld/zones/public.xml

 

<zone>
  <short>Public</short>
  <description>For use in public areas. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
  <service name="ssh"/>
  <service name="dhcpv6-client"/>
  <port protocol="tcp" port="22"/>
  <port protocol="tcp" port="80"/>
</zone>

포트 오픈

 

$ firewall-cmd --permanent --zone=public --add-port=80/tcp

 

새로고침

$ firewall-cmd --reload

 

on/off

$ sudo systemctl start firewalld
or
$ sudo systemctl enable firewalld

$ sudo systemctl stop firewalld
or
$ sudo systemctl disable firewalld

 

방화벽 상태 확인

$ firewall-cmd --state

 

활성화 상태의 zone 리스트

$ firewall-cmd --get-active-zones

 

서비스 리스트

$ firewall-cmd --get-service

 

특정 존에 있는 서비스 리스트

$ firewall-cmd --zone=public --list-services