#1、启动firewalld服务
systemctl restart firewalld.service && systemctl enable firewalld.service
#2、添加默策略zone默认为public 先添加SSH通讯IP
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.89.17" port protocol="tcp" port="22" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.89.148" port protocol="tcp" port="22" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.89.149" port protocol="tcp" port="22" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.89.18" port protocol="tcp" port="22" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.89.19" port protocol="tcp" port="22" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.89.161" port protocol="tcp" port="22" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.14.186" port protocol="tcp" port="22" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.14.187" port protocol="tcp" port="22" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.14.188" port protocol="tcp" port="22" accept"
#3、添加应用的防火墙
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.89.116" port protocol="tcp" port="10050" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.89.146" port protocol="tcp" port="10050" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.89.147" port protocol="tcp" port="10050" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="8.9.60.152" port protocol="tcp" port="16379" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.7.71" port protocol="tcp" port="18890" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.7.72" port protocol="tcp" port="18890" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.30.115" port protocol="tcp" port="18890" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.34.1" port protocol="tcp" port="8080" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.34.2" port protocol="tcp" port="8080" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.34.3" port protocol="tcp" port="8080" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.34.4" port protocol="tcp" port="8080" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="8.9.34.1" port protocol="tcp" port="8080" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="8.9.34.2" port protocol="tcp" port="8080" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="8.9.60.0/24" port protocol="tcp" port="8080" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="8.9.60.0/24" port protocol="tcp" port="18890" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.7.71" port protocol="tcp" port="18890" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.7.72" port protocol="tcp" port="18890" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.7.73" port protocol="tcp" port="18890" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.7.74" port protocol="tcp" port="18890" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="7.99.7.75" port protocol="tcp" port="18890" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="9.8.8.133" port protocol="tcp" port="18890" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="9.8.8.134" port protocol="tcp" port="18890" accept"
#3、去掉默认的ssh服务由2中的添加授信客户端通过22端口访问
firewall-cmd --permanent --remove-service=ssh
#4、更新策略
firewall-cmd --reload
#5、验证策略
