Linux Seven week five lessons (March 23)

Seven weeks Five sessions (March 23)
10.19 iptables Regular backup and recovery
10.20 Firewalld 9 Zone
10.21 Firewalld About zone operation
10.22 Firewalld about service operations

10.19 iptables Regular backup and recovery

Backup, command as follows

Iptables rules can be backed up to other files, and the file name can be taken by itself.

Only the rules for NAT.

There are no rules in this table

Back up the rules just now

If you want to restart, load, you need to put in the configuration file, to be saved with the command service iptables.

This part of the knowledge is very large, only with a few lessons introduced, can meet the needs of daily work, there are special requirements can be learned, not to do network administrators, do not need to study so thorough.

10.20 Firewalld 9 Zone
Iptables can meet daily needs, Firewald is a new trend.

Just banned the Firewald, open iptables, now reverse operation.

Firewald rules are more.

NAT tables also have rules, chain more.

The unit of Firewald is zones,

View zones

View the default zones.

9 Zone Differences

The most secure drop

10.21 Firewalld About zone operation

Ens33 copy into Ens37, write down the configuration file. Restart the Network service. Load the FIREWALLD.

10.22 Firewalld about service operations

List all the service in the system.

Check the current zone.

Check the current Servic, the back can add s, also can not add.

No services

The contents of this file are here

View the contents of the file and see only FTP because only 1 service additions were added.

There are already HTTP service, no settings permanent, the file will not be reflected. To set the permanent will be reflected.

Set to permanent, the command is as follows.

To view the file, the command is as follows.

List the service, and run the following command.

zones where the configuration files are stored. Each time you change it, the old backup is added, and the suffix is the same.

Where the configuration files for the services are stored. There is no configuration file because there are no changes.

Where the template for the configuration file is stored.

Small case
Make a change to the FTP service and place the FTP services under Word zone.
Steps:
1)

Change port 21 to 1121.

Edit a file, add a line

Linux Seven week five lessons (March 23)