linux開放或限制端口和ip訪問

#Step1：刪除原有的3306端口訪問規則
firewall-cmd --permanent --remove-port=3306/tcp

 

#Step2：添加富規則
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address=" 192.168.1.100" port protocol="tcp" port="3306" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="127.0.0.1" port protocol="tcp" port="3306" accept"

#網段

firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.12.0/24" port protocol="tcp" port="3306" accept"

 

#Step3：生效規則
firewall-cmd --reload

#Step4：查看結果
firewall-cmd --list-all 

firewall-cmd --list-rich-rules

 

#step4:刪除富規則

firewall-cmd --remove-rich-rule 'rule family="ipv4" source address="192.168.1.0/24" port port="5236" protocol="tcp" accept' --permanent