CentOS 7 Linux iptables 开放端口映射

2022-09-27 11:10:25 浏览数 (1)

大家好,又见面了,我是你们的朋友全栈君。

/bin/systemctl stop firewalld.service

systemctl disable firewalld.service

yum install iptables-services

Package iptables-services-1.4.21-17.el7.x86_64 already installed and latest version

vi /etc/sysconfig/iptables

-A INPUT -m state –state NEW -m tcp -p tcp –dport 6070 -j ACCEPT

/bin/systemctl start iptables.service

systemctl enable iptables.service

iptables -L

yum install nc

nc 106.14.21.223 6070

rpm –q telnet-client

[root@iZuf6492eksiqtd5hy86f8Z pay]# iptables -t nat -A PREROUTING -p tcp –dport 80 -j REDIRECT –to-port 8080

[root@iZuf6492eksiqtd5hy86f8Z pay]# iptables -t nat -A PREROUTING -p tcp –dport 16070 -j REDIRECT –to-port 6070

[root@iZuf6492eksiqtd5hy86f8Z pay]# service iptables save

iptables: Saving firewall rules to /etc/sysconfig/iptables:[ OK ]

service iptables status

/bin/systemctl restart iptables iptables.service

/bin/systemctl start iptables iptables.service

/bin/systemctl stop iptables iptables.service

#查看已经开放的端口

[root@localhost bin]# netstat -tln

#查看网络连接

netstat -apn

#查看端口使用情况

[root@localhost bin]# lsof -i:3306

COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME

mysqld 2728 mysql 30u IPv6 27628 0t0 TCP *:mysql (LISTEN)

lsof -i TCP| fgrep LISTEN

[root@localhost bin]# netstat -anlp | grep 3306

tcp6 0 0 :::3306 :::* LISTEN 2728/mysqld

unix 3 [ ] STREAM CONNECTED 33068 3360/pulseaudio

[root@localhost bin]# nc -lp 9393 &

[root@localhost bin]# netstat -an | grep 9393

tcp 0 0 0.0.0.0:9393 0.0.0.0:* LISTEN

tcp6 0 0 :::9393 :::* LISTEN

vi /etc/sysconfig/iptables

-A RH-Firewall-1-INPUT -m state –state NEW -m tcp -p tcp –dport 9393 -j ACCEPT

[root@localhost nescafe]# /bin/systemctl start firewalld.service

发布者:全栈程序员栈长,转载请注明出处:https://javaforall.cn/179200.html原文链接:https://javaforall.cn

0 人点赞