CentOS 7 Linux iptables 开放端口映射
/bin/systemctl stop firewalld.service
systemctl disable firewalld.service
yum install iptables-services
Package iptables-services-1.4.21-17.el7.x86_64 already installed and latest version
vi /etc/sysconfig/iptables
-A INPUT -m state --state NEW -m tcp -p tcp --dport 6070 -j ACCEPT
/bin/systemctl start iptables.service
systemctl enable iptables.service
iptables -L
yum install nc
nc 106.14.21.223 6070
rpm –q telnet-client
[root@iZuf6492eksiqtd5hy86f8Z pay]# iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080
[root@iZuf6492eksiqtd5hy86f8Z pay]# iptables -t nat -A PREROUTING -p tcp --dport 16070 -j REDIRECT --to-port 6070
[root@iZuf6492eksiqtd5hy86f8Z pay]# service iptables save
iptables: Saving firewall rules to /etc/sysconfig/iptables:[ OK ]
service iptables status
/bin/systemctl restart iptables iptables.service
/bin/systemctl start iptables iptables.service
/bin/systemctl stop iptables iptables.service
#查看已经开放的端口
[root@localhost bin]# netstat -tln
#查看网络连接
netstat -apn
#查看端口使用情况
[root@localhost bin]# lsof -i:3306
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
mysqld 2728 mysql 30u IPv6 27628 0t0 TCP *:mysql (LISTEN)
lsof -i TCP| fgrep LISTEN
[root@localhost bin]# netstat -anlp | grep 3306
tcp6 0 0 :::3306 :::* LISTEN 2728/mysqld
unix 3 [ ] STREAM CONNECTED 33068 3360/pulseaudio
[root@localhost bin]# nc -lp 9393 &
[root@localhost bin]# netstat -an | grep 9393
tcp 0 0 0.0.0.0:9393 0.0.0.0:* LISTEN
tcp6 0 0 :::9393 :::* LISTEN
vi /etc/sysconfig/iptables
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 9393 -j ACCEPT
[root@localhost nescafe]# /bin/systemctl start firewalld.service