admin管理员组文章数量:1642337
命令格式:
firewall-cmd --permanent --remove-rich-rule '规则列表'
firewall-cmd --permanent --remove-rich-rule 'rule family="ipv4" source address="0.0.0.0/0" forward-port port="8077" protocol="tcp" to-port="80" to-addr="192.168.4.245"'
下面是示例操作:
#显示规则列表
[root@new-center ~]# firewall-cmd --list-rich-rules
rule family="ipv4" source address="0.0.0.0/0" forward-port port="2224" protocol="tcp" to-port="2224" to-addr="192.168.11.241"
rule family="ipv4" source address="0.0.0.0/0" forward-port port="1935" protocol="tcp" to-port="1935" to-addr="192.168.4.189"
rule family="ipv4" source address="0.0.0.0/0" forward-port port="23456" protocol="tcp" to-port="23456" to-addr="192.168.4.187"
rule family="ipv4" source address="0.0.0.0/0" forward-port port="10555" protocol="tcp" to-port="10555" to-addr="192.168.4.234"
rule family="ipv4" source address="0.0.0.0/0" forward-port port="8078" protocol="tcp" to-port="8080" to-addr="192.168.4.234"
rule family="ipv4" source address="0.0.0.0/0" forward-port port="8010" protocol="tcp" to-port="8010" to-addr="192.168.11.118"
rule family="ipv4" source address="0.0.0.0/0" forward-port port="8000" protocol="tcp" to-port="8000" to-addr="192.168.11.118"
rule family="ipv4" source address="0.0.0.0/0" forward-port port="3722" protocol="tcp" to-port="22" to-addr="192.168.11.249"
rule family="ipv4" source address="0.0.0.0/0" forward-port port="5080" protocol="tcp" to-port="5080" to-addr="192.168.11.244"
rule family="ipv4" source address="0.0.0.0/0" forward-port port="23389" protocol="tcp" to-port="3389" to-addr="192.168.11.36"
#删除rich rule
[root@new-center ~]# firewall-cmd --permanent --remove-rich-rule 'rule family="ipv4" source address="0.0.0.0/0" forward-port port="2224" protocol="tcp" to-port="2224" to-addr="192.168.11.241"'
success
[root@new-center ~]# firewall-cmd --permanent --remove-rich-rule 'rule family="ipv4" source address="0.0.0.0/0" forward-port port="23389" protocol="tcp" to-port="3389" to-addr="192.168.11.36"'
success
[root@new-center ~]# firewall-cmd --permanent --remove-rich-rule 'rule family="ipv4" source address="0.0.0.0/0" forward-port port="5080" protocol="tcp" to-port="5080" to-addr="192.168.11.244"'
success
[root@new-center ~]# firewall-cmd --permanent --remove-rich-rule 'rule family="ipv4" source address="0.0.0.0/0" forward-port port="3722" protocol="tcp" to-port="22" to-addr="192.168.11.249"'
success
[root@new-center ~]# firewall-cmd --permanent --remove-rich-rule 'rule family="ipv4" source address="0.0.0.0/0" forward-port port="8000" protocol="tcp" to-port="8000" to-addr="192.168.11.118"'
success
[root@new-center ~]# firewall-cmd --permanent --remove-rich-rule 'rule family="ipv4" source address="0.0.0.0/0" forward-port port="8010" protocol="tcp" to-port="8010" to-addr="192.168.11.118"'
success
[root@new-center ~]# firewall-cmd --permanent --remove-rich-rule 'rule family="ipv4" source address="0.0.0.0/0" forward-port port="8078" protocol="tcp" to-port="8080" to-addr="192.168.4.234"'
success
[root@new-center ~]# firewall-cmd --permanent --remove-rich-rule 'rule family="ipv4" source address="0.0.0.0/0" forward-port port="10555" protocol="tcp" to-port="10555" to-addr="192.168.4.234"'
success
[root@new-center ~]# firewall-cmd --permanent --remove-rich-rule 'rule family="ipv4" source address="0.0.0.0/0" forward-port port="23456" protocol="tcp" to-port="23456" to-addr="192.168.4.187"'
success
[root@new-center ~]# firewall-cmd --permanent --remove-rich-rule 'rule family="ipv4" source address="0.0.0.0/0" forward-port port="1935" protocol="tcp" to-port="1935" to-addr="192.168.4.189"'
success
#重载firewalld
[root@new-center ~]# firewall-cmd --reload
success
#查看rich-rules
[root@new-center ~]# firewall-cmd --list-rich-rules
版权声明:本文标题:firewall-cmd使用--remove-rich-rule删除rich-rule规则 内容由热心网友自发贡献,该文观点仅代表作者本人, 转载请联系作者并注明出处:https://www.elefans.com/dongtai/1729335182a1196887.html, 本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌抄袭侵权/违法违规的内容,一经查实,本站将立刻删除。
发表评论