10.20 firewalld的9个zone

Linux防火墙-firewalld

打开firewalld
systemctl disable iptables
systemctl stop iptables
systemctl enable firewalld
systemctl start firewalld
firewalld默认有9个zone
默认zone为public
firewall-cmd --get-zones //查看所有zone
firewall-cmd --get-default-zone//查看默认zone

firewalld防火墙机制

因为之前禁掉了firewalld，打开了iptables，所以现在需要打开firewalld，禁掉iptables

打开firewalld

[root@hf-01 ~]# systemctl disable iptables
[root@hf-01 ~]# systemctl stop iptables
[root@hf-01 ~]# systemctl enable firewalld
Created symlink from /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service to /usr/lib/systemd/system/firewalld.service.
Created symlink from /etc/systemd/system/basic.target.wants/firewalld.service to /usr/lib/systemd/system/firewalld.service.
[root@hf-01 ~]# systemctl start firewalld
[root@hf-01 ~]# 

这时用iptables -nvL和iptables -t nat -nvL查看规则，会看到增加了很多的链

firewalld默认有9个zone，zone是firewalld的一个单位，默认使用public zone——>每个zone就好比一个规则集
- 规则集就是zone里面自带一些规则，比如：这个zone放行了80端口，放行了22端口，关闭了某某端口，这就是一个规则集

firewalld中查看所有zone

firewall-cmd --get-zones //查看所有zone

[root@hf-01 ~]# firewall-cmd --get-zones    //查看所有zone
block dmz drop external home internal public trusted work
[root@hf-01 ~]#

firewalld中查询默认的zone

firewall-cmd --get-default-zone //查看默认zone

[root@hf-01 ~]# firewall-cmd --get-default-zone    //查看默认zone
public
[root@hf-01 ~]#

firewalld中9个zone的区别