一 防火墙的开启与关闭

1.systemctl status firewalld

[root@localhost ~]# systemctl status firewalld
● firewalld.service - firewalld - dynamic firewall daemon
   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)
   Active: active (running) since Sat 2022-11-12 15:42:18 CST; 1min 7s ago
     Docs: man:firewalld(1)
 Main PID: 840 (firewalld)
    Tasks: 2
   CGroup: /system.slice/firewalld.service
           └─840 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid

2.systemctl start firewalld  开始

3.systemctl stop  firewalld  关闭

4.systemctl restart firewalld 重启防火墙

5.firewall-cmd --reload   配置规则重置

6.firewall-cmd --list-all   查看已经配置的规则

7.添加规则：firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.152.2" port protocol="tcp" port="8080" accept"

8.删除规则：firewall-cmd --permanent --remove-rich-rule="rule family="ipv4" source address="192.168.152.2" port protocol="tcp" port="8080" accept"

二 防火墙的开启时制定ip和端口进行访问

2.1 资源说明

客户端服务器A： 192.168.152.2 

服务端服务器B： 192.168.152.141

2.2 进行操作

在B上进行开启防火墙，启动tomcat，端口为8080

如下：

 2.在A上进行访问：可以看到无法访问

 2.3 在B上进行制定ip和端口进行访问

在b上进行配置

1.开发制定ip和端口

[root@localhost apache-tomcat-8.5.6]# firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.152.2" port protocol="tcp" port="8080" accept"
success

2.查看指定规则列表
[root@localhost apache-tomcat-8.5.6]# firewall-cmd --list-all
public (active)
  target: default
  icmp-block-inversion: no
  interfaces: ens33
  sources: 
  services: ssh dhcpv6-client
  ports: 3306/tcp 80/tcp 8089/tcp
  protocols: 
  masquerade: no
  forward-ports: 
  source-ports: 
  icmp-blocks: 
  rich rules: 
   3.重新加载规则
[root@localhost apache-tomcat-8.5.6]# firewall-cmd --reload
success

4.查看规则列表
[root@localhost apache-tomcat-8.5.6]# firewall-cmd --list-all
public (active)
  target: default
  icmp-block-inversion: no
  interfaces: ens33
  sources: 
  services: ssh dhcpv6-client
  ports: 3306/tcp 80/tcp 8089/tcp
  protocols: 
  masquerade: no
  forward-ports: 
  source-ports: 
  icmp-blocks: 
  rich rules: 
    rule family="ipv4" source address="192.168.152.2" port port="8080" protocol="tcp" accept
[root@localhost apache-tomcat-8.5.6]# 

在A服务上进行重新访问：ok实现了开启防火墙，制定ip和端口进行访问。