ubuntu ufw firewall防火墙端口设置 （防火墙的的开启、禁用、开放端口、关闭端口、重置、重启…）

firewall 安装

firewall-cmd --zone=public --add-port=6379/tcp --permanent

重新加载防火墙生效上面的配置

firewall-cmd --reload

配置端口是否访问的时候，需要安装防火墙

sudo apt-get install firewalld

firewall在ubuntu机器上也可以运行，但是ubuntu通常使用ufw的防火墙。

Usage: ufw COMMAND

Commands:
 enable                          enables the firewall
 disable                         disables the firewall
 default ARG                     set default policy
 logging LEVEL                   set logging to LEVEL
 allow ARGS                      add allow rule
 deny ARGS                       add deny rule
 reject ARGS                     add reject rule
 limit ARGS                      add limit rule
 delete RULE|NUM                 delete RULE
 insert NUM RULE                 insert RULE at NUM
 route RULE                      add route RULE
 route delete RULE|NUM           delete route RULE
 route insert NUM RULE           insert route RULE at NUM
 reload                          reload firewall
 reset                           reset firewall
 status                          show firewall status
 status numbered                 show firewall status as numbered list of RULES
 status verbose                  show verbose firewall status
 show ARG                        show firewall report
 version                         display version information

Application profile commands:
 app list                        list application profiles
 app info PROFILE                show information on PROFILE
 app update PROFILE              update PROFILE
 app default ARG                 set default application policy

ufw开启

sudo ufw enable

ufw关闭

sudo ufw disable

ufw状态查询

sudo ufw status

要获得额外信息，请使用 status verbose ：

sudo ufw status verbose

ufw允许端口22

sudo ufw allow 22

ufw禁止端口22

sudo ufw delete allow 22

用 status numbered 得到的所有活动规则的顺序和 ID。当您要插入新编号的规则或根据其编号删除现有规则时，这非常有用。

sudo ufw status numbered

# 输出示例Status: active

    To                          Action      From
    --                          ------      ----
[ 1] 22/tcp                     ALLOW IN    Anywhere
[ 2] 22/tcp (v6)                ALLOW IN    Anywhere (v6)

ufw允许协议通过

sudo ufw allow ssh

ufw删除允许通过的协议

删除 UFW 规则

有两种方法可以删除 UFW 规则：

   按规则编号
   按规格说明

sudo ufw delete allow ssh

# Status: active

    To                          Action      From
    --                          ------      ----
[ 1] 22/tcp                     ALLOW IN    Anywhere
[ 2] 80/tcp                     ALLOW IN    Anywhere
[ 3] 443/tcp                    ALLOW IN    Anywhere
[ 4] 8069/tcp                   ALLOW IN    Anywhere

# 知道规则编号后，请使用 ufw delete 命令后跟要删除的规则编号。

# 例如，要删除编号为 4 的规则，您可以键入：

sudo ufw delete 4

ufw防火墙重新加载

sudo ufw reload

ufw重置

sudo ufw reset