works inside the kernel, while iptables allows you to define the table structure of the rule set.
However, iptables rules are a little "complicated", so Ubuntu provides the UFW setting tool to simplify some iptables settings, and its background is still iptables. UFW is short for uncomplicated firewall. For some complicated settings, you still need to go to iptables.
UFW-related files and folders include:
/Etc/UFW/: contains some UFW environment
, these configurations are the same as configuring IP addresses with commands, and restarting them will lose effect.) how to save them.
[Root @ tp ~] #/Etc/rc. d/init. d/iptables save
In this way, you can write it to the/etc/sysconfig/iptables file. After writing, remember to repeat the firewall to make it work.
[Root @ tp ~] # Service iptables restart
Now there are no configurations in the IPTABLES configuration
installation, the network authentication method (NIS and LDAP) will not work.
"No Firewall"
No firewall gives full access without any security checks. Security checks are disabled for certain services. It is recommended that you select this only if you are running in a trusted network (not the Internet), or if you want to do a detailed firewall
parentheses will not be displayed.sudo UFW statusUFW Use Example:Allow Port 53$ sudo ufw allow 53Disable Port 53$ sudo ufw delete Allow 53Allow Port 80$ sudo ufw allow 80/tcpDisable Port 80$ sudo ufw delete Allow 80/tcpAllow SMTP ports$ sudo ufw allow SMTPRemove licensing for SMTP ports$ sudo ufw delete allow SMTPAllow a specific IP$ sudo ufw allow from 192.168.254.254Delete the above rule$ sudo ufw delete allow from 192.168.254.254The Linux 2.4 Kernel later provides a very good
Cd/usr/lib/firewalld/services directory to store the defined Network service and port parameters, system parameters, can not be modified.
cd/etc/firewalld/services/
Systemctl Status Firewall View Firewall service status
Firewall-cmd--state View the status of firewall
Firewall
I. Introduction of APF Firewall
APF is a Linux under the Iptables firewall, by the R-FX networks development and maintenance, the implementation code is basically shell. Personally think this is the most easy-to-use and powerful firewall script under Linux. Similar levels are Bastille,firehol,kill my firewall, and so
??Vi/etc/sysconfig/iptables-A input-m state–state new-m tcp-p Tcp–dport 80-j Accept (consent 80 port via firewall)-A input-m state–state new-m tcp-p Tcp–dport 3306-j Accept (consent 3306 port via firewall)Special tips:Very many netizens add these two rules to the last line of the firewall configuration. Cause the
Because hacker technology is becoming more and more public, professional, various attacks increasingly frequent, the virus is becoming more and more rampant, major network security incidents are increasing. As the first gate of enterprise security protection, Firewall has become an important part of enterprise network security protection.
However, when we examine the security situation of our country's enterprise network, we still find that there are
(2) deploying a Linux environment (Centos + Nginx + Tomcat + Mysql)-firewall configuration
In my local testing practice, the following is a complete operating document for Centos + Nginx + Tomcat + Mysql on Linux. The record is as follows, we hope to give a systematic reference to programmers who want to build a Linux environment systematically. However, because most of the operations are recorded while be
to allow access to resources such as RealAudio but still block access to common system services, select "intermediate 」. You can select "custom" to allow specific services to pass through the firewall. Note: If you select to set up an intermediate or advanced firewall during installation, the network authentication method (NIS and LDAP) will not work.
「 No firewall
Yesterday to help a friend to configure the CentOS server, a first for the convenience of testing directly shut the firewall, and then need to configure a firewall, the Internet to find a few firewall rules have errors, and later found that bloggers are not serious post, there are too many character errors, the following is my collation of the Pro-Test available
for you - the Onesudo update-alternatives--config javacDittoNote: Some articles say that you can only use the following statements:sudo update-alternatives–config Java, I have not tried!You're done, use the java-version command to view our Java environment variables--------------------------------------------------------------------------------------------------------------- ----To set some ports in the firewall switch, you can modify the edit/etc/s
Turn on the Redis port and modify the firewall configuration file Vi/etc/sysconfig/iptablesJoin Port Configuration-A rh-firewall-1-input-m state--state new-m tcp-p TCP--dport 6379-j ACCEPT-A rh-firewall-1-input-m state--state new-m tcp-p TCP--dport 6379:7000-j ACCEPT//Open p
Turn on the Redis port and modify the firewall configuration file Vi/etc/sysconfig/iptablesJoin Port Configuration-A rh-firewall-1-input-m state--state new-m tcp-p TCP--dport 6379-j ACCEPT-A rh-firewall-1-input-m state--state new-m tcp-p TCP--dport 6379:7000-j ACCEPT//Open p
Vi/etc/sysconfig/iptables-A input-m state–state new-m tcp-p tcp–dport 80-j ACCEPT (allow 80 ports through the firewall)-A input-m state–state new-m tcp-p tcp–dport 3306-j ACCEPT (Allow 3306 ports through the firewall)Special Note: Many netizens add these two rules to the last line of the firewall configuration, causing
Vi/etc/sysconfig/iptables-A input-m state–state new-m tcp-p tcp–dport 80-j ACCEPT (allow 80 ports through the firewall)-A input-m state–state new-m tcp-p tcp–dport 3306-j ACCEPT (Allow 3306 ports through the firewall)Special Tips:Many netizens add these two rules to the last line of the firewall configuration, causing
Colleague found that the Nginx configuration after HTTPS can not access, I help solve the time from the following starting point1.防火墙未开放443端口2.配置出错
1
2
3
So we netstat -anp look at the ports that the firewall is openingThe discovery is already listening, that must be a configuration problem.Check the con
CentOS7 's firewall configuration is very different from previous versions, and after a great deal of trying, it finally found the key to solving the problem.
CentOS7 This version of the firewall defaults to use the firewall, and the previous version of the use of iptables is not the same. Configure the
H3C f1000-c-g Firewall Initial configuration:
IP address: 192.168.0.1;
Web functionality is turned on;
User name and password are: admin;
H3C firewall buy back ready to use, according to the configuration document operation, ping default address 192.168.0.1, access to http://192.168.0.1 through a
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.