您现在的位置: 破洛洛 >> 服务器 >> Linux >> 正文

CentOS 7中如何设置ip白名单

作者:佚名 来源:网络整理 更新时间:2017-4-11
分享到

  CentOS 7中设置ip白名单

 

  我想安装CentOS 7防火墙,所有传入的请求将被封锁,除了IP白名单。对于白名单的IP的所有端口都要访问?

   adding sources to a zone. First checkout which sources there are for your zone:

  firewall-cmd --permanent --zone=public --list-sources

  If there are none, you can start to add them, this is your "whitelist"

  firewall-cmd --permanent --zone=public --add-source=192.168.100.0/24

  firewall-cmd --permanent --zone=public --add-source=192.168.222.123/32

  (That adds a whole/24and a single IP, just so you have a reference for both a subnet and a single IP)

  Set the range of ports you'd like open:

  firewall-cmd --permanent --zone=public --add-port=1-22/tcp

  firewall-cmd --permanent --zone=public --add-port=1-22/udp

  This just does ports 1 through 22. You can widen this, if you'd like.

  Now, reload what you've done.

  firewall-cmd --reload

  And check your work:

  firewall-cmd --zone=public --list-all

转载请注明:破洛洛(谢谢合作)
网友评论: