ubuntu ufw firewall防火墙端口设置 （防火墙的的开启、禁用、开放端口、关闭端口、重置、重启…）

firewall 安装

firewall-cmd --zone=public --add-port=6379/tcp --permanent

重新加载防火墙生效上面的配置

firewall-cmd --reload

配置端口是否访问的时候，需要安装防火墙

sudo apt-get install firewalld

firewall在ubuntu机器上也可以运行，但是ubuntu通常使用ufw的防火墙。

Usage: ufw COMMANDCommands:enable                          enables the firewalldisable                         disables the firewalldefault ARG                     set default policylogging LEVEL                   set logging to LEVELallow ARGS                      add allow ruledeny ARGS                       add deny rulereject ARGS                     add reject rulelimit ARGS                      add limit ruledelete RULE|NUM                 delete RULEinsert NUM RULE                 insert RULE at NUMroute RULE                      add route RULEroute delete RULE|NUM           delete route RULEroute insert NUM RULE           insert route RULE at NUMreload                          reload firewallreset                           reset firewallstatus                          show firewall statusstatus numbered                 show firewall status as numbered list of RULESstatus verbose                  show verbose firewall statusshow ARG                        show firewall reportversion                         display version informationApplication profile commands:app list                        list application profilesapp info PROFILE                show information on PROFILEapp update PROFILE              update PROFILEapp default ARG                 set default application policy

ufw开启

sudo ufw enable

ufw关闭

sudo ufw disable

ufw状态查询

sudo ufw status

要获得额外信息，请使用 status verbose ：

sudo ufw status verbose

ufw允许端口22

sudo ufw allow 22

ufw禁止端口22

sudo ufw delete allow 22

用 status numbered 得到的所有活动规则的顺序和 ID。当您要插入新编号的规则或根据其编号删除现有规则时，这非常有用。

sudo ufw status numbered

# 输出示例Status: activeTo                          Action      From--                          ------      ----
[ 1] 22/tcp                     ALLOW IN    Anywhere
[ 2] 22/tcp (v6)                ALLOW IN    Anywhere (v6)

ufw允许协议通过

sudo ufw allow ssh

ufw删除允许通过的协议

删除 UFW 规则有两种方法可以删除 UFW 规则：按规则编号按规格说明

sudo ufw delete allow ssh

# Status: activeTo                          Action      From--                          ------      ----
[ 1] 22/tcp                     ALLOW IN    Anywhere
[ 2] 80/tcp                     ALLOW IN    Anywhere
[ 3] 443/tcp                    ALLOW IN    Anywhere
[ 4] 8069/tcp                   ALLOW IN    Anywhere# 知道规则编号后，请使用 ufw delete 命令后跟要删除的规则编号。# 例如，要删除编号为 4 的规则，您可以键入：sudo ufw delete 4

ufw防火墙重新加载

sudo ufw reload

ufw重置

sudo ufw reset