[CentOS 7] firewall 방화벽 설정

✏️ Info. 

- Linux CentOS 7 firewall 방화벽 설정
- root 로 접근

---

📋 List.

1. 방화벽 가동
2. 목록 조회
3. 포트 추가(단일, 범위)
4. 포트 삭제
5. 포트 포워딩
6. 방화벽 재시작

---

✔️ Content.

 

 

1. 방화벽 가동

# systemctl start firewalld

---

2. 목록 조회

# firewall-cmd --list-all

---

3. 포트 추가

 

• 포트 추가(단일)

# firewall-cmd --permanent --zone=public --add-port=[포트]/tcp

ex) # firewall-cmd --permanent --zone=public --add-port=80/tcp

 

• 포트 추가(범위)

# firewall-cmd --permanent --zone=public --add-port=[포트]-[포트]/tcp 

ex) # firewall-cmd --permanent --zone=public --add-port=30000-30040/tcp

---

4. 포트 삭제

# firewall-cmd --permanent --zone=public --remove-port=[삭제할 포트]/tcp

ex) # firewall-cmd --permanent --zone=public --remove-port=80/tcp

---

5. 포트 포워딩

#  firewall-cmd --permanent --zone=public --add-forward-port=port=[접속포트]:proto=tcp:toport=[연결포트]:toaddr=[주소(IP)]

ex) # firewall-cmd --permanent --zone=public --add-forward-port=port=80:proto=tcp:toport=8080:toaddr=192.168.0.1

---

6. 방화벽 재시작 (방화벽 설정 후 재시작을 해야 적용이 된다)

# firewall-cmd --reload

• 실제로 적용되는 파일 - /etc/firewalld/zones/public.xml

<?xml version="2.0" encoding="utf-8"?>
<zone>
  <short>Public</short>
  <description>For use in public areas. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
  <service name="ssh"/>
  <service name="dhcpv6-client"/>
  <service name="ftp"/>
  <service name="http"/>
  <port protocol="tcp" port="1523"/>
  <port protocol="tcp" port="30000-30040"/>
  <port protocol="tcp" port="33000-33040"/>
  <port protocol="tcp" port="8001"/>
  <port protocol="tcp" port="8002"/>
  <port protocol="tcp" port="21"/>
  <port protocol="tcp" port="8080"/>
  <port protocol="tcp" port="9090"/>
  <forward-port to-addr="192.168.10.15" to-port="8080" protocol="tcp" port="80"/>
</zone>