建站
咨詢
售后
建站咨詢
新聞中心
centos 7.0版本之后相對于以前的版本更改行還是很大的，原先在6.5版本之前命令和配置文件大致都差不多，自7.0版本之后一些功能都有較大的改變，接下來會從防火墻和服務(wù)的相關(guān)配置來進(jìn)行剖析。
成都創(chuàng)新互聯(lián)服務(wù)項目包括廣元網(wǎng)站建設(shè)、廣元網(wǎng)站制作、廣元網(wǎng)頁制作以及廣元網(wǎng)絡(luò)營銷策劃等。多年來，我們專注于互聯(lián)網(wǎng)行業(yè)，利用自身積累的技術(shù)優(yōu)勢、行業(yè)經(jīng)驗、深度合作伙伴關(guān)系等，向廣大中小型企業(yè)、政府機(jī)構(gòu)等提供互聯(lián)網(wǎng)行業(yè)的解決方案，廣元網(wǎng)站推廣取得了明顯的社會效益與經(jīng)濟(jì)效益。目前，我們服務(wù)的客戶以成都為中心已經(jīng)輻射到廣元省份的部分城市，未來相信會繼續(xù)擴(kuò)大服務(wù)區(qū)域并繼續(xù)獲得客戶的支持與信任！
（一）防火墻firewall的相關(guān)介紹及配置
CentOS 7中防火墻是一個非常的強大的功能，在CentOS 6.5中在iptables防火墻中進(jìn)行了升級了。(he dynamic firewall daemon firewalld provides a dynamically managed firewall with support for network “zones” to assign a level of trust to a network and its associated connections and interfaces. It has support for IPv4 and IPv6 firewall settings. It supports Ethernet bridges and has a separation of runtime and permanent configuration options. It also has an interface for services or applications to add firewall rules directly-----官方文檔)
firewall--區(qū)域zone
網(wǎng)絡(luò)區(qū)域定義了網(wǎng)絡(luò)連接的可信等級。這是一個 一對多的關(guān)系，這意味著一次連接可以僅僅是一個區(qū)域的一部分，而一個區(qū)域可以用于很多連接。那個區(qū)域是否可用室友firewall提供的區(qū)域按照從不信任到信任的順序排序。
firewall 分類
Firewalls can be used to separate networks into different zones based on the level of trust the user has decided to place on the devices and traffic within that network. NetworkManager informs firewalld to which zone an interface belongs. An interface’s assigned zone can be changed by NetworkManager or via the firewall-config tool which can open the relevant NetworkManager window for you.
The zone settings in /etc/firewalld/ are a range of preset settings which can be quickly applied to a network interface. They are listed here with a brief explanation:
drop
Any incoming network packets are dropped, there is no reply. Only outgoing network connections are possible.
block
Any incoming network connections are rejected with an icmp-host-prohibited message for IPv4 and icmp6-adm-prohibited for IPv6. Only network connections initiated from within the system are possible.
public
For use in public areas. You do not trust the other computers on the network to not harm your computer. Only selected incoming connections are accepted.
external
For use on external networks with masquerading enabled especially for routers. You do not trust the other computers on the network to not harm your computer. Only selected incoming connections are accepted.
dmz
For computers in your demilitarized zone that are publicly-accessible with limited access to your internal network. Only selected incoming connections are accepted.
work
For use in work areas. You mostly trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.
home
For use in home areas. You mostly trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.
internal
For use on internal networks. You mostly trust the other computers on the networks to not harm your computer. Only selected incoming connections are accepted.
trusted
All network connections are accepted.
It is possible to designate one of these zones to be the default zone. When interface connections are added to NetworkManager, they are assigned to the default zone. On installation, the default zone in firewalld is set to be the public zone.
注意：目錄中存放定義好的網(wǎng)絡(luò)服務(wù)和端口參數(shù)，系統(tǒng)參數(shù)，不能修改。
firewall常用命令：
1，重啟，關(guān)閉開啟firewall.service服務(wù)
相關(guān)PDF文檔可以到主機(jī)寶貝資源站下載：
具體下載目錄在 /2017年資料/4月/20日/CentOS 7.0防火墻Firewalld和服務(wù)相關(guān)配置/
文章名稱：CentOS7.0防火墻Firewalld和服務(wù)相關(guān)配置
鏈接URL：http://fisionsoft.com.cn/article/cddjeep.html
