linux之防火墻firewall解讀
更新時(shí)間：2025年01月13日 09:36:31 作者：qq_33805862
本文介紹了如何使用`firewall-cmd`命令管理防火墻,配置Docker0服務(wù)到受信任連接,并詳細(xì)解釋了防火墻區(qū)域選項(xiàng)、IP集選項(xiàng)、ICMP類(lèi)型選項(xiàng)、服務(wù)選項(xiàng)等
一、常用命令
#查看防火墻狀態(tài) systemctl status firewalld #關(guān)閉防火墻 systemctl stop firewalld #3、開(kāi)啟防火墻 systemctl start firewalld #4、禁止防火墻開(kāi)機(jī)自啟動(dòng) systemctl disable firewalld #5、設(shè)置防火墻開(kāi)機(jī)自啟動(dòng) systemctl enable firewalld
使用firewall-cmd命令管理防火墻
# 查看防火墻狀態(tài)： firewall-cmd --state #查看防火墻，添加的端口也可以看到： firewall-cmd --list-all #列出所有區(qū)域的設(shè)置: firewall-cmd --list-all-zones #查看防火墻已開(kāi)放的端口列表(默認(rèn)不開(kāi)放任何端口) firewall-cmd --list-ports # 查看獲取的區(qū)域 [root@localhost ~] firewall-cmd --get-active-zones docker interfaces: docker0 注意：所有操作之前都需附帶 --zone=public --permanent（指定區(qū)域和永久生效）。操作之后需要執(zhí)行firewall-cmd --reload刷新配置。 # 添加規(guī)則 開(kāi)啟80端口（允許80端口通過(guò)防火墻） firewall-cmd --permanent --zone=public --add-port=80/tcp # --permanent (永久生效) #更新防火墻規(guī)則 firewall-cmd --reload # 刪除開(kāi)放的端口 firewall-cmd --permanent --zone=public --remove-port=80/tcp # 查看80端口狀態(tài)： firewall-cmd --zone=public --query-port=80/tcp -------------- ip白名單設(shè)置 ---------------- #關(guān)閉某個(gè)端口 #開(kāi)啟某個(gè)端口（指定IP可訪問(wèn)） 只允許服務(wù)器192.168.1.1/24網(wǎng)段的3306端口能訪問(wèn) firewall-cmd --permanent --zone=public --add-rich-rule="rule family="ipv4" source address="192.168.1.1/24" port protocol="tcp" port="3306" accept" #禁止ping數(shù)據(jù)包： firewall-cmd --permanent --add-rich-rule='rule protocol value=icmp drop' # 關(guān)閉某個(gè)端口（刪除策略） firewall-cmd --permanent --zone=public --remove-rich-rule="rule family="ipv4" source address="10.1.1.14/32" port protocol="tcp" port="80" accept" # 拒絕所有包： firewall-cmd --panic-on # 取消拒絕狀態(tài)： firewall-cmd --panic-off # 查看是否拒絕： firewall-cmd --query-panic #顯示服務(wù)列表： firewall-cmd --get-services #允許SSH服務(wù)通過(guò)： firewall-cmd --add-service=ssh #禁止SSH服務(wù)通過(guò)： firewall-cmd --remove-service=ssh #顯示當(dāng)前服務(wù)： firewall-cmd --list-services #臨時(shí)允許Samba服務(wù)通過(guò)600秒： firewall-cmd --enable service=samba --timeout=600 #查看指定接口所屬區(qū)域： firewall-cmd --get-zone-of-interface=eth0 #完全重新載入規(guī)則（會(huì)中斷已連接的連接，類(lèi)似于重啟）： firewall-cmd --complete-reload 注意：打開(kāi)防火墻后一定要先添加ssh端口到規(guī)則中，并重新載入 firewall-cmd --permanent --zone=public --add-port=22/tcp firewall-cmd --reload
二、配置docker0服務(wù)到受信任連接
#配置docker0服務(wù)到受信任連接 nmcli connection modify docker0 connection.zone trusted #停止NetworkManager（檢測(cè)網(wǎng)絡(luò)、自動(dòng)連接網(wǎng)絡(luò)的程序）服務(wù) systemctl stop NetworkManager.service #修改docker網(wǎng)絡(luò)接口為內(nèi)部區(qū)域（永久） firewall-cmd --permanent --zone=trusted --change-interface=docker0 #啟動(dòng)NetworkManager（檢測(cè)網(wǎng)絡(luò)、自動(dòng)連接網(wǎng)絡(luò)的程序）服務(wù) systemctl start NetworkManager.service #配置docker0服務(wù)到受信任連接 nmcli connection modify docker0 connection.zone trusted #重啟docker服務(wù) systemctl restart docker.service
三、help 幫助詳解
[root@localhost ~]# firewall-cmd --help
Usage: firewall-cmd [OPTIONS...]
General Options
-h, --help Prints a short help text and exists
-V, --version Print the version string of firewalld
-q, --quiet Do not print status messages
Status Options 狀態(tài)選擇
--state Return and print firewalld state 返回并打印防火墻狀態(tài)
--reload Reload firewall and keep state information 重新加載防火墻并保留狀態(tài)信息
--complete-reload Reload firewall and lose state information 重新加載防火墻并丟失狀態(tài)信息
--runtime-to-permanent
Create permanent from runtime configuration
--check-config Check permanent configuration for errors
Log Denied Options 日志拒絕選項(xiàng)
--get-log-denied Print the log denied value 打印日志拒絕值
--set-log-denied=<value>
Set log denied value
Automatic Helpers Options
--get-automatic-helpers
Print the automatic helpers value
--set-automatic-helpers=<value>
Set automatic helpers value
Permanent Options
--permanent Set an option permanently
Usable for options marked with [P]Zone Options 區(qū)域選項(xiàng)
Zone Options
--get-default-zone Print default zone for connections and interfaces 打印連接和接口的默認(rèn)區(qū)域
--set-default-zone=<zone>
Set default zone 設(shè)置默認(rèn)區(qū)域
--get-active-zones Print currently active zones 打印當(dāng)前活動(dòng)區(qū)域
--get-zones Print predefined zones [P] 打印預(yù)定義區(qū)域
--get-services Print predefined services [P] 打印預(yù)定義服務(wù)
--get-icmptypes Print predefined icmptypes [P]
--get-zone-of-interface=<interface>
Print name of the zone the interface is bound to [P]
--get-zone-of-source=<source>[/<mask>]|<MAC>|ipset:<ipset>
Print name of the zone the source is bound to [P]
--list-all-zones List everything added for or enabled in all zones [P]
--new-zone=<zone> Add a new zone [P only]
--new-zone-from-file=<filename> [--name=<zone>]
Add a new zone from file with optional name [P only]
--delete-zone=<zone> Delete an existing zone [P only]
--load-zone-defaults=<zone>
Load zone default settings [P only] [Z]
--zone=<zone> Use this zone to set or query options, else default zone
Usable for options marked with [Z]
--get-target Get the zone target [P only] [Z]
--set-target=<target>
Set the zone target [P only] [Z]
--info-zone=<zone> Print information about a zone
--path-zone=<zone> Print file path of a zone [P only]IPSet Options
IPSet Options
--get-ipset-types Print the supported ipset types 打印支持的ipset類(lèi)型
--new-ipset=<ipset> --type=<ipset type> [--option=<key>[=<value>]]..
Add a new ipset [P only]
--new-ipset-from-file=<filename> [--name=<ipset>]
Add a new ipset from file with optional name [P only]
--delete-ipset=<ipset>
Delete an existing ipset [P only]
--load-ipset-defaults=<ipset>
Load ipset default settings [P only]
--info-ipset=<ipset> Print information about an ipset
--path-ipset=<ipset> Print file path of an ipset [P only]
--get-ipsets Print predefined ipsets
--ipset=<ipset> --set-description=<description>
Set new description to ipset [P only]
--ipset=<ipset> --get-description
Print description for ipset [P only]
--ipset=<ipset> --set-short=<description>
Set new short description to ipset [P only]
--ipset=<ipset> --get-short
Print short description for ipset [P only]
--ipset=<ipset> --add-entry=<entry>
Add a new entry to an ipset [P]
--ipset=<ipset> --remove-entry=<entry>
Remove an entry from an ipset [P]
--ipset=<ipset> --query-entry=<entry>
Return whether ipset has an entry [P]
--ipset=<ipset> --get-entries
List entries of an ipset [P]
--ipset=<ipset> --add-entries-from-file=<entry>
Add a new entries to an ipset [P]
--ipset=<ipset> --remove-entries-from-file=<entry>
Remove entries from an ipset [P]IcmpType Options
IcmpType Options
--new-icmptype=<icmptype>
Add a new icmptype [P only]
--new-icmptype-from-file=<filename> [--name=<icmptype>]
Add a new icmptype from file with optional name [P only]
--delete-icmptype=<icmptype>
Delete an existing icmptype [P only]
--load-icmptype-defaults=<icmptype>
Load icmptype default settings [P only]
--info-icmptype=<icmptype>
Print information about an icmptype
--path-icmptype=<icmptype>
Print file path of an icmptype [P only]
--icmptype=<icmptype> --set-description=<description>
Set new description to icmptype [P only]
--icmptype=<icmptype> --get-description
Print description for icmptype [P only]
--icmptype=<icmptype> --set-short=<description>
Set new short description to icmptype [P only]
--icmptype=<icmptype> --get-short
Print short description for icmptype [P only]
--icmptype=<icmptype> --add-destination=<ipv>
Enable destination for ipv in icmptype [P only]
--icmptype=<icmptype> --remove-destination=<ipv>
Disable destination for ipv in icmptype [P only]
--icmptype=<icmptype> --query-destination=<ipv>
Return whether destination ipv is enabled in icmptype [P only]
--icmptype=<icmptype> --get-destinations
List destinations in icmptype [P only]Service Options
Service Options
--new-service=<service>
Add a new service [P only]
--new-service-from-file=<filename> [--name=<service>]
Add a new service from file with optional name [P only]
--delete-service=<service>
Delete an existing service [P only]
--load-service-defaults=<service>
Load icmptype default settings [P only]
--info-service=<service>
Print information about a service
--path-service=<service>
Print file path of a service [P only]
--service=<service> --set-description=<description>
Set new description to service [P only]
--service=<service> --get-description
Print description for service [P only]
--service=<service> --set-short=<description>
Set new short description to service [P only]
--service=<service> --get-short
Print short description for service [P only]
--service=<service> --add-port=<portid>[-<portid>]/<protocol>
Add a new port to service [P only]
--service=<service> --remove-port=<portid>[-<portid>]/<protocol>
Remove a port from service [P only]
--service=<service> --query-port=<portid>[-<portid>]/<protocol>
Return whether the port has been added for service [P only]
--service=<service> --get-ports
List ports of service [P only]
--service=<service> --add-protocol=<protocol>
Add a new protocol to service [P only]
--service=<service> --remove-protocol=<protocol>
Remove a protocol from service [P only]
--service=<service> --query-protocol=<protocol>
Return whether the protocol has been added for service [P only]
--service=<service> --get-protocols
List protocols of service [P only]
--service=<service> --add-source-port=<portid>[-<portid>]/<protocol>
Add a new source port to service [P only]
--service=<service> --remove-source-port=<portid>[-<portid>]/<protocol>
Remove a source port from service [P only]
--service=<service> --query-source-port=<portid>[-<portid>]/<protocol>
Return whether the source port has been added for service [P only]
--service=<service> --get-source-ports
List source ports of service [P only]
--service=<service> --add-module=<module>
Add a new module to service [P only]
--service=<service> --remove-module=<module>
Remove a module from service [P only]
--service=<service> --query-module=<module>
Return whether the module has been added for service [P only]
--service=<service> --get-modules
List modules of service [P only]
--service=<service> --set-destination=<ipv>:<address>[/<mask>]
Set destination for ipv to address in service [P only]
--service=<service> --remove-destination=<ipv>
Disable destination for ipv i service [P only]
--service=<service> --query-destination=<ipv>:<address>[/<mask>]
Return whether destination ipv is set for service [P only]
--service=<service> --get-destinations
List destinations in service [P only]Options to Adapt and Query Zones 適應(yīng)和查詢區(qū)域的選項(xiàng)
Options to Adapt and Query Zones
--list-all List everything added for or enabled in a zone [P] [Z]
--list-services List services added for a zone [P] [Z]
--timeout=<timeval> Enable an option for timeval time, where timeval is
a number followed by one of letters 's' or 'm' or 'h'
Usable for options marked with [T]
--set-description=<description>
Set new description to zone [P only] [Z]
--get-description Print description for zone [P only] [Z]
--set-short=<description>
Set new short description to zone [P only] [Z]
--get-short Print short description for zone [P only] [Z]
--add-service=<service>
Add a service for a zone [P] [Z] [T]
--remove-service=<service>
Remove a service from a zone [P] [Z]
--query-service=<service>
Return whether service has been added for a zone [P] [Z]
--list-ports List ports added for a zone [P] [Z]
--add-port=<portid>[-<portid>]/<protocol>
Add the port for a zone [P] [Z] [T]
--remove-port=<portid>[-<portid>]/<protocol>
Remove the port from a zone [P] [Z]
--query-port=<portid>[-<portid>]/<protocol>
Return whether the port has been added for zone [P] [Z]
--list-protocols List protocols added for a zone [P] [Z]
--add-protocol=<protocol>
Add the protocol for a zone [P] [Z] [T]
--remove-protocol=<protocol>
Remove the protocol from a zone [P] [Z]
--query-protocol=<protocol>
Return whether the protocol has been added for zone [P] [Z]
--list-source-ports List source ports added for a zone [P] [Z]
--add-source-port=<portid>[-<portid>]/<protocol>
Add the source port for a zone [P] [Z] [T]
--remove-source-port=<portid>[-<portid>]/<protocol>
Remove the source port from a zone [P] [Z]
--query-source-port=<portid>[-<portid>]/<protocol>
Return whether the source port has been added for zone [P] [Z]
--list-icmp-blocks List Internet ICMP type blocks added for a zone [P] [Z]
--add-icmp-block=<icmptype>
Add an ICMP block for a zone [P] [Z] [T]
--remove-icmp-block=<icmptype>
Remove the ICMP block from a zone [P] [Z]
--query-icmp-block=<icmptype>
Return whether an ICMP block has been added for a zone
[P] [Z]
--add-icmp-block-inversion
Enable inversion of icmp blocks for a zone [P] [Z]
--remove-icmp-block-inversion
Disable inversion of icmp blocks for a zone [P] [Z]
--query-icmp-block-inversion
Return whether inversion of icmp blocks has been enabled
for a zone [P] [Z]
--list-forward-ports List IPv4 forward ports added for a zone [P] [Z]
--add-forward-port=port=<portid>[-<portid>]:proto=<protocol>[:toport=<portid>[-<portid>]][:toaddr=<address>[/<mask>]]
Add the IPv4 forward port for a zone [P] [Z] [T]
--remove-forward-port=port=<portid>[-<portid>]:proto=<protocol>[:toport=<portid>[-<portid>]][:toaddr=<address>[/<mask>]]
Remove the IPv4 forward port from a zone [P] [Z]
--query-forward-port=port=<portid>[-<portid>]:proto=<protocol>[:toport=<portid>[-<portid>]][:toaddr=<address>[/<mask>]]
Return whether the IPv4 forward port has been added for
a zone [P] [Z]
--add-masquerade Enable IPv4 masquerade for a zone [P] [Z] [T]
--remove-masquerade Disable IPv4 masquerade for a zone [P] [Z]
--query-masquerade Return whether IPv4 masquerading has been enabled for a
zone [P] [Z]
--list-rich-rules List rich language rules added for a zone [P] [Z]
--add-rich-rule=<rule>
Add rich language rule 'rule' for a zone [P] [Z] [T]
--remove-rich-rule=<rule>
Remove rich language rule 'rule' from a zone [P] [Z]
--query-rich-rule=<rule>
Return whether a rich language rule 'rule' has been
added for a zone [P] [Z]Options to Handle Bindings of Interfaces 處理接口綁定的選項(xiàng)
Options to Handle Bindings of Interfaces
--list-interfaces List interfaces that are bound to a zone [P] [Z]
--add-interface=<interface>
Bind the <interface> to a zone [P] [Z]
--change-interface=<interface>
Change zone the <interface> is bound to [P] [Z]
--query-interface=<interface>
Query whether <interface> is bound to a zone [P] [Z]
--remove-interface=<interface>
Remove binding of <interface> from a zone [P] [Z]
Options to Handle Bindings of Sources
--list-sources List sources that are bound to a zone [P] [Z]
--add-source=<source>[/<mask>]|<MAC>|ipset:<ipset>
Bind the source to a zone [P] [Z]
--change-source=<source>[/<mask>]|<MAC>|ipset:<ipset>
Change zone the source is bound to [Z]
--query-source=<source>[/<mask>]|<MAC>|ipset:<ipset>
Query whether the source is bound to a zone [P] [Z]
--remove-source=<source>[/<mask>]|<MAC>|ipset:<ipset>
Remove binding of the source from a zone [P] [Z]Helper Options 助手選項(xiàng)
Helper Options
--new-helper=<helper> --module=<module> [--family=<family>]
Add a new helper [P only]
--new-helper-from-file=<filename> [--name=<helper>]
Add a new helper from file with optional name [P only]
--delete-helper=<helper>
Delete an existing helper [P only]
--load-helper-defaults=<helper>
Load helper default settings [P only]
--info-helper=<helper> Print information about an helper
--path-helper=<helper> Print file path of an helper [P only]
--get-helpers Print predefined helpers
--helper=<helper> --set-description=<description>
Set new description to helper [P only]
--helper=<helper> --get-description
Print description for helper [P only]
--helper=<helper> --set-short=<description>
Set new short description to helper [P only]
--helper=<helper> --get-short
Print short description for helper [P only]
--helper=<helper> --add-port=<portid>[-<portid>]/<protocol>
Add a new port to helper [P only]
--helper=<helper> --remove-port=<portid>[-<portid>]/<protocol>
Remove a port from helper [P only]
--helper=<helper> --query-port=<portid>[-<portid>]/<protocol>
Return whether the port has been added for helper [P only]
--helper=<helper> --get-ports
List ports of helper [P only]
--helper=<helper> --set-module=<module>
Set module to helper [P only]
--helper=<helper> --get-module
Get module from helper [P only]
--helper=<helper> --set-family={ipv4|ipv6|}
Set family for helper [P only]
--helper=<helper> --get-family
Get module from helper [P only]Direct Options 直接選項(xiàng)
Direct Options
--direct First option for all direct options 所有直接選項(xiàng)的第一個(gè)選項(xiàng)
--get-all-chains
Get all chains [P] 獲得所有鏈條
--get-chains {ipv4|ipv6|eb} <table>
Get all chains added to the table [P]
--add-chain {ipv4|ipv6|eb} <table> <chain>
Add a new chain to the table [P]
--remove-chain {ipv4|ipv6|eb} <table> <chain>
Remove the chain from the table [P]
--query-chain {ipv4|ipv6|eb} <table> <chain>
Return whether the chain has been added to the table [P]
--get-all-rules
Get all rules [P]
--get-rules {ipv4|ipv6|eb} <table> <chain>
Get all rules added to chain in table [P]
--add-rule {ipv4|ipv6|eb} <table> <chain> <priority> <arg>...
Add rule to chain in table [P]
--remove-rule {ipv4|ipv6|eb} <table> <chain> <priority> <arg>...
Remove rule with priority from chain in table [P]
--remove-rules {ipv4|ipv6|eb} <table> <chain>
Remove rules from chain in table [P]
--query-rule {ipv4|ipv6|eb} <table> <chain> <priority> <arg>...
Return whether a rule with priority has been added to
chain in table [P]
--passthrough {ipv4|ipv6|eb} <arg>...
Pass a command through (untracked by firewalld)
--get-all-passthroughs
Get all tracked passthrough rules [P]
--get-passthroughs {ipv4|ipv6|eb} <arg>...
Get tracked passthrough rules [P]
--add-passthrough {ipv4|ipv6|eb} <arg>...
Add a new tracked passthrough rule [P]
--remove-passthrough {ipv4|ipv6|eb} <arg>...
Remove a tracked passthrough rule [P]
--query-passthrough {ipv4|ipv6|eb} <arg>...
Return whether the tracked passthrough rule has been
added [P]Lockdown Options
Lockdown Options --lockdown-on Enable lockdown. --lockdown-off Disable lockdown. --query-lockdown Query whether lockdown is enabled
Lockdown Whitelist Options
Lockdown Whitelist Options
--list-lockdown-whitelist-commands
List all command lines that are on the whitelist [P]
--add-lockdown-whitelist-command=<command>
Add the command to the whitelist [P]
--remove-lockdown-whitelist-command=<command>
Remove the command from the whitelist [P]
--query-lockdown-whitelist-command=<command>
Query whether the command is on the whitelist [P]
--list-lockdown-whitelist-contexts
List all contexts that are on the whitelist [P]
--add-lockdown-whitelist-context=<context>
Add the context context to the whitelist [P]
--remove-lockdown-whitelist-context=<context>
Remove the context from the whitelist [P]
--query-lockdown-whitelist-context=<context>
Query whether the context is on the whitelist [P]
--list-lockdown-whitelist-uids
List all user ids that are on the whitelist [P]
--add-lockdown-whitelist-uid=<uid>
Add the user id uid to the whitelist [P]
--remove-lockdown-whitelist-uid=<uid>
Remove the user id uid from the whitelist [P]
--query-lockdown-whitelist-uid=<uid>
Query whether the user id uid is on the whitelist [P]
--list-lockdown-whitelist-users
List all user names that are on the whitelist [P]
--add-lockdown-whitelist-user=<user>
Add the user name user to the whitelist [P]
--remove-lockdown-whitelist-user=<user>
Remove the user name user from the whitelist [P]
--query-lockdown-whitelist-user=<user>
Query whether the user name user is on the whitelist [P]Panic Options
Panic Options --panic-on Enable panic mode --panic-off Disable panic mode --query-panic Query whether panic mode is enabled
總結(jié)
以上為個(gè)人經(jīng)驗(yàn)，希望能給大家一個(gè)參考，也希望大家多多支持腳本之家。
相關(guān)文章
文章介紹了在/etc/profile文件末尾增加代碼并執(zhí)行source使其生效后,不同用戶會(huì)在/var/log/history目錄下以用戶名為目錄名的子目錄中,進(jìn)入對(duì)應(yīng)目錄后有以用戶登錄時(shí)間及IP為名字的文件,文件內(nèi)容為用戶執(zhí)行命令的日志信息2024-12-12
ubuntu18.04 安裝qt5.12.8及環(huán)境配置的詳細(xì)教程
這篇文章主要介紹了ubuntu18.04 安裝qt5.12.8及環(huán)境配置的教程，本文通過(guò)圖文并茂的形式給大家介紹的非常詳細(xì)，對(duì)大家的學(xué)習(xí)或工作具有一定的參考借鑒價(jià)值,需要的朋友可以參考下2020-05-05
Linux在服務(wù)器多節(jié)點(diǎn)下面實(shí)現(xiàn)快速查找日志
在多節(jié)點(diǎn)分布式系統(tǒng)中,通過(guò)使用find和grep命令組合,可以實(shí)現(xiàn)高效的日志搜索,先定位到具體日期的文件夾,再執(zhí)行命令全面掃描各個(gè)服務(wù)器節(jié)點(diǎn)下的日志文件,從而簡(jiǎn)化日志查詢過(guò)程2024-11-11
Apache Doris的Bitmap索引和BloomFilter索引使用及注意事項(xiàng)
bitmap index是一種位圖索引，是一種快速數(shù)據(jù)結(jié)構(gòu)，能夠加快查詢速度，BloomFilter索引也是以Block為粒度創(chuàng)建的，這篇文章主要介紹了Apache Doris的Bitmap索引和BloomFilter索引使用,需要的朋友可以參考下2022-09-09
一開(kāi)始想借助于第三方的備份恢復(fù)工具來(lái)完成當(dāng)前的Ubuntu 16.04系統(tǒng)的備份以及后面的還原工作，不過(guò)考慮到那樣做比較麻煩，索性就使用tar工具直接備份得了。這篇文章給大家詳細(xì)介紹了Ubuntu 16.04備份和恢復(fù)的方法，有需要的朋友們可以參考借鑒，下面來(lái)一起看看吧。2016-11-11
這篇文章主要介紹了Linux腳本啟動(dòng)jar包方式,具有很好的參考價(jià)值,希望對(duì)大家有所幫助,如有錯(cuò)誤或未考慮完全的地方,望不吝賜教2024-04-04
掌握Linux系統(tǒng)的防火墻基本命令對(duì)于系統(tǒng)管理至關(guān)重要,本文介紹了查看防火墻狀態(tài)、啟動(dòng)、關(guān)閉、重啟防火墻,以及如何開(kāi)放或限制端口,特別是如何批量處理端口,文中提供的命令和步驟可以幫助用戶有效管理防火墻設(shè)置,確保系統(tǒng)的安全性2024-10-10
Linux利用traceroute命令發(fā)現(xiàn)負(fù)載均衡的實(shí)戰(zhàn)案例
在網(wǎng)絡(luò)管理和故障排除中,了解數(shù)據(jù)包的路徑和識(shí)別負(fù)載均衡節(jié)點(diǎn)是非常重要的,traceroute 命令是一個(gè)用于跟蹤數(shù)據(jù)包在網(wǎng)絡(luò)中經(jīng)過(guò)的路由路徑的工具,本文將詳細(xì)介紹如何利用 traceroute 命令發(fā)現(xiàn)網(wǎng)絡(luò)中的負(fù)載均,需要的朋友可以參考下2024-07-07
Unix/Linux系統(tǒng)下的nobody用戶與nologin詳細(xì)介紹
linux系統(tǒng)下的nobody用戶是什么用戶，nologin又是什么?本文為大家詳細(xì)介紹了這兩個(gè)no字輩2018-10-10
Linux+php+apache+oracle環(huán)境搭建之CentOS下安裝Apache
Linux環(huán)境是在VMware虛擬機(jī)中搭建的，重在學(xué)習(xí)，安裝的系統(tǒng)是CentOS6.5-64bit。本文主要講訴在CentOS中如何安裝APACHE。2014-08-08