linux防火墙简单设置

systemctl mask iptables   设置为重启不开启
systemctl mask ip6tables  设置为重启不开启
systemctl mask ebtables   设置为重启不开启
systemctl enables firewalld  设置为重启开启
systemctl start firewalld   开启防火墙

firewall-cmd --permanent --add-service=ssh  允许SSH服务
firewall-cmd --permanent --add-rich-rule='rule family=ipv4 source address=172.17.10.0/24 servcie name=ssh reject' 允许某个地址的SSH服务
firewall-cmd --reload  重启
firewall-cmd --list-all  列出规则