端口

lsof

Linux查看端口的命令：
第一种：lsof -i:端口号
-a：显示本机所有连接和监听地端口
-n：网络IP地址的形式，显示当前建立的有效连接和端口
-r：显示路由表信息
-s：显示按协议的统计信息
-v：显示当前有效的连接
-t：显示所有TCP协议连接情况
-u：显示所有UDP协议连接情况
-i：显示自动配置端口的状态
-l：仅仅显示连接状态为listening的服务网络状态
-p：显示pid/program name
TCP连接的几种状态
ESTABLISHED 已建立
CLOSED 已关闭
LISTENING 正在监听
FIN-WAIT-2 等待连接关闭
TIME-WAIT 等待足够时间，确保服务器正常关闭该连接

防火墙

状态相关

  1. firewall-cmd --state             返回并打印防火墙状态
  2. firewall-cmd --reload             Reload firewall and keep state information
  3. firewall-cmd --complete-reload    Reload firewall and lose state information
  4. firewall-cmd --runtime-to-permanent
  5. Create permanent from runtime configuration
  6. firewall-cmd --check-config       Check permanent configuration for errors

1、开启防火墙
systemctl start firewalld
2、开放指定端口
firewall-cmd —zone=public —add-port=1935/tcp —permanent
命令含义：
–zone #作用域
–add-port=1935/tcp #添加端口，格式为：端口/通讯协议
–permanent #永久生效，没有此参数重启后失效
3、重启防火墙
firewall-cmd —reload
关闭防火墙
systemctl stop firewalld
查看防火墙状态
systemctl status firewalld
firewall-cmd —state

查看服务器支持的所有服务

  1. firewall-cmd --get-serivces

查询外网端口是否放行

  1. firewall-cmd --query-port=8080/tcp

查询外网端口

  1. firewall-cmd --permanent --query-port=8080/tcp

查看端口号
netstat -ntlp //查看当前所有tcp端口·
netstat -ntulp |grep 1935 //查看所有1935端口使用情况·

帮助文档

  2. Usage: firewall-cmd [OPTIONS...]
  4. General Options
  5.   -h, --help           Prints a short help text and exists
  6.   -V, --version        Print the version string of firewalld
  7.   -q, --quiet          Do not print status messages
  10. Log Denied Options
  11.   --get-log-denied     Print the log denied value
  12.   --set-log-denied=<value>
  13.                        Set log denied value
  15. Automatic Helpers Options
  16.   --get-automatic-helpers
  17.                        Print the automatic helpers value
  18.   --set-automatic-helpers=<value>
  19.                        Set automatic helpers value
  21. Permanent Options
  22.   --permanent          Set an option permanently
  23.                        Usable for options marked with [P]
  25. Zone Options
  26.   --get-default-zone   Print default zone for connections and interfaces
  27.   --set-default-zone=<zone>
  28.                        Set default zone
  29.   --get-active-zones   Print currently active zones
  30.   --get-zones          Print predefined zones [P]
  31.   --get-services       Print predefined services [P]
  32.   --get-icmptypes      Print predefined icmptypes [P]
  33.   --get-zone-of-interface=<interface>
  34.                        Print name of the zone the interface is bound to [P]
  35.   --get-zone-of-source=<source>[/<mask>]|<MAC>|ipset:<ipset>
  36.                        Print name of the zone the source is bound to [P]
  37.   --list-all-zones     List everything added for or enabled in all zones [P]
  38.   --new-zone=<zone>    Add a new zone [P only]
  39.   --new-zone-from-file=<filename> [--name=<zone>]
  40.                        Add a new zone from file with optional name [P only]
  41.   --delete-zone=<zone> Delete an existing zone [P only]
  42.   --load-zone-defaults=<zone>
  43.                        Load zone default settings [P only] [Z]
  44.   --zone=<zone>        Use this zone to set or query options, else default zone
  45.                        Usable for options marked with [Z]
  46.   --get-target         Get the zone target [P only] [Z]
  47.   --set-target=<target>
  48.                        Set the zone target [P only] [Z]
  49.   --info-zone=<zone>   Print information about a zone
  50.   --path-zone=<zone>   Print file path of a zone [P only]
  52. IPSet Options
  53.   --get-ipset-types    Print the supported ipset types
  54.   --new-ipset=<ipset> --type=<ipset type> [--option=<key>[=<value>]]..
  55.                        Add a new ipset [P only]
  56.   --new-ipset-from-file=<filename> [--name=<ipset>]
  57.                        Add a new ipset from file with optional name [P only]
  58.   --delete-ipset=<ipset>
  59.                        Delete an existing ipset [P only]
  60.   --load-ipset-defaults=<ipset>
  61.                        Load ipset default settings [P only]
  62.   --info-ipset=<ipset> Print information about an ipset
  63.   --path-ipset=<ipset> Print file path of an ipset [P only]
  64.   --get-ipsets         Print predefined ipsets
  65.   --ipset=<ipset> --set-description=<description>
  66.                        Set new description to ipset [P only]
  67.   --ipset=<ipset> --get-description
  68.                        Print description for ipset [P only]
  69.   --ipset=<ipset> --set-short=<description>
  70.                        Set new short description to ipset [P only]
  71.   --ipset=<ipset> --get-short
  72.                        Print short description for ipset [P only]
  73.   --ipset=<ipset> --add-entry=<entry>
  74.                        Add a new entry to an ipset [P]
  75.   --ipset=<ipset> --remove-entry=<entry>
  76.                        Remove an entry from an ipset [P]
  77.   --ipset=<ipset> --query-entry=<entry>
  78.                        Return whether ipset has an entry [P]
  79.   --ipset=<ipset> --get-entries
  80.                        List entries of an ipset [P]
  81.   --ipset=<ipset> --add-entries-from-file=<entry>
  82.                        Add a new entries to an ipset [P]
  83.   --ipset=<ipset> --remove-entries-from-file=<entry>
  84.                        Remove entries from an ipset [P]
  86. IcmpType Options
  87.   --new-icmptype=<icmptype>
  88.                        Add a new icmptype [P only]
  89.   --new-icmptype-from-file=<filename> [--name=<icmptype>]
  90.                        Add a new icmptype from file with optional name [P only]
  91.   --delete-icmptype=<icmptype>
  92.                        Delete an existing icmptype [P only]
  93.   --load-icmptype-defaults=<icmptype>
  94.                        Load icmptype default settings [P only]
  95.   --info-icmptype=<icmptype>
  96.                        Print information about an icmptype
  97.   --path-icmptype=<icmptype>
  98.                        Print file path of an icmptype [P only]
  99.   --icmptype=<icmptype> --set-description=<description>
  100.                        Set new description to icmptype [P only]
  101.   --icmptype=<icmptype> --get-description
  102.                        Print description for icmptype [P only]
  103.   --icmptype=<icmptype> --set-short=<description>
  104.                        Set new short description to icmptype [P only]
  105.   --icmptype=<icmptype> --get-short
  106.                        Print short description for icmptype [P only]
  107.   --icmptype=<icmptype> --add-destination=<ipv>
  108.                        Enable destination for ipv in icmptype [P only]
  109.   --icmptype=<icmptype> --remove-destination=<ipv>
  110.                        Disable destination for ipv in icmptype [P only]
  111.   --icmptype=<icmptype> --query-destination=<ipv>
  112.                        Return whether destination ipv is enabled in icmptype [P only]
  113.   --icmptype=<icmptype> --get-destinations
  114.                        List destinations in icmptype [P only]
  116. Service Options
  117.   --new-service=<service>
  118.                        Add a new service [P only]
  119.   --new-service-from-file=<filename> [--name=<service>]
  120.                        Add a new service from file with optional name [P only]
  121.   --delete-service=<service>
  122.                        Delete an existing service [P only]
  123.   --load-service-defaults=<service>
  124.                        Load icmptype default settings [P only]
  125.   --info-service=<service>
  126.                        Print information about a service
  127.   --path-service=<service>
  128.                        Print file path of a service [P only]
  129.   --service=<service> --set-description=<description>
  130.                        Set new description to service [P only]
  131.   --service=<service> --get-description
  132.                        Print description for service [P only]
  133.   --service=<service> --set-short=<description>
  134.                        Set new short description to service [P only]
  135.   --service=<service> --get-short
  136.                        Print short description for service [P only]
  137.   --service=<service> --add-port=<portid>[-<portid>]/<protocol>
  138.                        Add a new port to service [P only]
  139.   --service=<service> --remove-port=<portid>[-<portid>]/<protocol>
  140.                        Remove a port from service [P only]
  141.   --service=<service> --query-port=<portid>[-<portid>]/<protocol>
  142.                        Return whether the port has been added for service [P only]
  143.   --service=<service> --get-ports
  144.                        List ports of service [P only]
  145.   --service=<service> --add-protocol=<protocol>
  146.                        Add a new protocol to service [P only]
  147.   --service=<service> --remove-protocol=<protocol>
  148.                        Remove a protocol from service [P only]
  149.   --service=<service> --query-protocol=<protocol>
  150.                        Return whether the protocol has been added for service [P only]
  151.   --service=<service> --get-protocols
  152.                        List protocols of service [P only]
  153.   --service=<service> --add-source-port=<portid>[-<portid>]/<protocol>
  154.                        Add a new source port to service [P only]
  155.   --service=<service> --remove-source-port=<portid>[-<portid>]/<protocol>
  156.                        Remove a source port from service [P only]
  157.   --service=<service> --query-source-port=<portid>[-<portid>]/<protocol>
  158.                        Return whether the source port has been added for service [P only]
  159.   --service=<service> --get-source-ports
  160.                        List source ports of service [P only]
  161.   --service=<service> --add-module=<module>
  162.                        Add a new module to service [P only]
  163.   --service=<service> --remove-module=<module>
  164.                        Remove a module from service [P only]
  165.   --service=<service> --query-module=<module>
  166.                        Return whether the module has been added for service [P only]
  167.   --service=<service> --get-modules
  168.                        List modules of service [P only]
  169.   --service=<service> --set-destination=<ipv>:<address>[/<mask>]
  170.                        Set destination for ipv to address in service [P only]
  171.   --service=<service> --remove-destination=<ipv>
  172.                        Disable destination for ipv i service [P only]
  173.   --service=<service> --query-destination=<ipv>:<address>[/<mask>]
  174.                        Return whether destination ipv is set for service [P only]
  175.   --service=<service> --get-destinations
  176.                        List destinations in service [P only]
  178. Options to Adapt and Query Zones
  179.   --list-all           List everything added for or enabled in a zone [P] [Z]
  180.   --list-services      List services added for a zone [P] [Z]
  181.   --timeout=<timeval>  Enable an option for timeval time, where timeval is
  182.                        a number followed by one of letters 's' or 'm' or 'h'
  183.                        Usable for options marked with [T]
  184.   --set-description=<description>
  185.                        Set new description to zone [P only] [Z]
  186.   --get-description    Print description for zone [P only] [Z]
  187.   --set-short=<description>
  188.                        Set new short description to zone [P only] [Z]
  189.   --get-short          Print short description for zone [P only] [Z]
  190.   --add-service=<service>
  191.                        Add a service for a zone [P] [Z] [T]
  192.   --remove-service=<service>
  193.                        Remove a service from a zone [P] [Z]
  194.   --query-service=<service>
  195.                        Return whether service has been added for a zone [P] [Z]
  196.   --list-ports         List ports added for a zone [P] [Z]
  197.   --add-port=<portid>[-<portid>]/<protocol>
  198.                        Add the port for a zone [P] [Z] [T]
  199.   --remove-port=<portid>[-<portid>]/<protocol>
  200.                        Remove the port from a zone [P] [Z]
  201.   --query-port=<portid>[-<portid>]/<protocol>
  202.                        Return whether the port has been added for zone [P] [Z]
  203.   --list-protocols     List protocols added for a zone [P] [Z]
  204.   --add-protocol=<protocol>
  205.                        Add the protocol for a zone [P] [Z] [T]
  206.   --remove-protocol=<protocol>
  207.                        Remove the protocol from a zone [P] [Z]
  208.   --query-protocol=<protocol>
  209.                        Return whether the protocol has been added for zone [P] [Z]
  210.   --list-source-ports  List source ports added for a zone [P] [Z]
  211.   --add-source-port=<portid>[-<portid>]/<protocol>
  212.                        Add the source port for a zone [P] [Z] [T]
  213.   --remove-source-port=<portid>[-<portid>]/<protocol>
  214.                        Remove the source port from a zone [P] [Z]
  215.   --query-source-port=<portid>[-<portid>]/<protocol>
  216.                        Return whether the source port has been added for zone [P] [Z]
  217.   --list-icmp-blocks   List Internet ICMP type blocks added for a zone [P] [Z]
  218.   --add-icmp-block=<icmptype>
  219.                        Add an ICMP block for a zone [P] [Z] [T]
  220.   --remove-icmp-block=<icmptype>
  221.                        Remove the ICMP block from a zone [P] [Z]
  222.   --query-icmp-block=<icmptype>
  223.                        Return whether an ICMP block has been added for a zone
  224.                        [P] [Z]
  225.   --add-icmp-block-inversion
  226.                        Enable inversion of icmp blocks for a zone [P] [Z]
  227.   --remove-icmp-block-inversion
  228.                        Disable inversion of icmp blocks for a zone [P] [Z]
  229.   --query-icmp-block-inversion
  230.                        Return whether inversion of icmp blocks has been enabled
  231.                        for a zone [P] [Z]
  232.   --list-forward-ports List IPv4 forward ports added for a zone [P] [Z]
  233.   --add-forward-port=port=<portid>[-<portid>]:proto=<protocol>[:toport=<portid>[-<portid>]][:toaddr=<address>[/<mask>]]
  234.                        Add the IPv4 forward port for a zone [P] [Z] [T]
  235.   --remove-forward-port=port=<portid>[-<portid>]:proto=<protocol>[:toport=<portid>[-<portid>]][:toaddr=<address>[/<mask>]]
  236.                        Remove the IPv4 forward port from a zone [P] [Z]
  237.   --query-forward-port=port=<portid>[-<portid>]:proto=<protocol>[:toport=<portid>[-<portid>]][:toaddr=<address>[/<mask>]]
  238.                        Return whether the IPv4 forward port has been added for
  239.                        a zone [P] [Z]
  240.   --add-masquerade     Enable IPv4 masquerade for a zone [P] [Z] [T]
  241.   --remove-masquerade  Disable IPv4 masquerade for a zone [P] [Z]
  242.   --query-masquerade   Return whether IPv4 masquerading has been enabled for a
  243.                        zone [P] [Z]
  244.   --list-rich-rules    List rich language rules added for a zone [P] [Z]
  245.   --add-rich-rule=<rule>
  246.                        Add rich language rule 'rule' for a zone [P] [Z] [T]
  247.   --remove-rich-rule=<rule>
  248.                        Remove rich language rule 'rule' from a zone [P] [Z]
  249.   --query-rich-rule=<rule>
  250.                        Return whether a rich language rule 'rule' has been
  251.                        added for a zone [P] [Z]
  253. Options to Handle Bindings of Interfaces
  254.   --list-interfaces    List interfaces that are bound to a zone [P] [Z]
  255.   --add-interface=<interface>
  256.                        Bind the <interface> to a zone [P] [Z]
  257.   --change-interface=<interface>
  258.                        Change zone the <interface> is bound to [P] [Z]
  259.   --query-interface=<interface>
  260.                        Query whether <interface> is bound to a zone [P] [Z]
  261.   --remove-interface=<interface>
  262.                        Remove binding of <interface> from a zone [P] [Z]
  264. Options to Handle Bindings of Sources
  265.   --list-sources       List sources that are bound to a zone [P] [Z]
  266.   --add-source=<source>[/<mask>]|<MAC>|ipset:<ipset>
  267.                        Bind the source to a zone [P] [Z]
  268.   --change-source=<source>[/<mask>]|<MAC>|ipset:<ipset>
  269.                        Change zone the source is bound to [Z]
  270.   --query-source=<source>[/<mask>]|<MAC>|ipset:<ipset>
  271.                        Query whether the source is bound to a zone [P] [Z]
  272.   --remove-source=<source>[/<mask>]|<MAC>|ipset:<ipset>
  273.                        Remove binding of the source from a zone [P] [Z]
  275. Helper Options
  276.   --new-helper=<helper> --module=<module> [--family=<family>]
  277.                        Add a new helper [P only]
  278.   --new-helper-from-file=<filename> [--name=<helper>]
  279.                        Add a new helper from file with optional name [P only]
  280.   --delete-helper=<helper>
  281.                        Delete an existing helper [P only]
  282.   --load-helper-defaults=<helper>
  283.                        Load helper default settings [P only]
  284.   --info-helper=<helper> Print information about an helper
  285.   --path-helper=<helper> Print file path of an helper [P only]
  286.   --get-helpers         Print predefined helpers
  287.   --helper=<helper> --set-description=<description>
  288.                        Set new description to helper [P only]
  289.   --helper=<helper> --get-description
  290.                        Print description for helper [P only]
  291.   --helper=<helper> --set-short=<description>
  292.                        Set new short description to helper [P only]
  293.   --helper=<helper> --get-short
  294.                        Print short description for helper [P only]
  295.   --helper=<helper> --add-port=<portid>[-<portid>]/<protocol>
  296.                        Add a new port to helper [P only]
  297.   --helper=<helper> --remove-port=<portid>[-<portid>]/<protocol>
  298.                        Remove a port from helper [P only]
  299.   --helper=<helper> --query-port=<portid>[-<portid>]/<protocol>
  300.                        Return whether the port has been added for helper [P only]
  301.   --helper=<helper> --get-ports
  302.                        List ports of helper [P only]
  303.   --helper=<helper> --set-module=<module>
  304.                        Set module to helper [P only]
  305.   --helper=<helper> --get-module
  306.                        Get module from helper [P only]
  307.   --helper=<helper> --set-family={ipv4|ipv6|}
  308.                        Set family for helper [P only]
  309.   --helper=<helper> --get-family
  310.                        Get module from helper [P only]
  312. Direct Options
  313.   --direct             First option for all direct options
  314.   --get-all-chains
  315.                        Get all chains [P]
  316.   --get-chains {ipv4|ipv6|eb} <table>
  317.                        Get all chains added to the table [P]
  318.   --add-chain {ipv4|ipv6|eb} <table> <chain>
  319.                        Add a new chain to the table [P]
  320.   --remove-chain {ipv4|ipv6|eb} <table> <chain>
  321.                        Remove the chain from the table [P]
  322.   --query-chain {ipv4|ipv6|eb} <table> <chain>
  323.                        Return whether the chain has been added to the table [P]
  324.   --get-all-rules
  325.                        Get all rules [P]
  326.   --get-rules {ipv4|ipv6|eb} <table> <chain>
  327.                        Get all rules added to chain in table [P]
  328.   --add-rule {ipv4|ipv6|eb} <table> <chain> <priority> <arg>...
  329.                        Add rule to chain in table [P]
  330.   --remove-rule {ipv4|ipv6|eb} <table> <chain> <priority> <arg>...
  331.                        Remove rule with priority from chain in table [P]
  332.   --remove-rules {ipv4|ipv6|eb} <table> <chain>
  333.                        Remove rules from chain in table [P]
  334.   --query-rule {ipv4|ipv6|eb} <table> <chain> <priority> <arg>...
  335.                        Return whether a rule with priority has been added to
  336.                        chain in table [P]
  337.   --passthrough {ipv4|ipv6|eb} <arg>...
  338.                        Pass a command through (untracked by firewalld)
  339.   --get-all-passthroughs
  340.                        Get all tracked passthrough rules [P]
  341.   --get-passthroughs {ipv4|ipv6|eb} <arg>...
  342.                        Get tracked passthrough rules [P]
  343.   --add-passthrough {ipv4|ipv6|eb} <arg>...
  344.                        Add a new tracked passthrough rule [P]
  345.   --remove-passthrough {ipv4|ipv6|eb} <arg>...
  346.                        Remove a tracked passthrough rule [P]
  347.   --query-passthrough {ipv4|ipv6|eb} <arg>...
  348.                        Return whether the tracked passthrough rule has been
  349.                        added [P]
  351. Lockdown Options
  352.   --lockdown-on        Enable lockdown.
  353.   --lockdown-off       Disable lockdown.
  354.   --query-lockdown     Query whether lockdown is enabled
  356. Lockdown Whitelist Options
  357.   --list-lockdown-whitelist-commands
  358.                        List all command lines that are on the whitelist [P]
  359.   --add-lockdown-whitelist-command=<command>
  360.                        Add the command to the whitelist [P]
  361.   --remove-lockdown-whitelist-command=<command>
  362.                        Remove the command from the whitelist [P]
  363.   --query-lockdown-whitelist-command=<command>
  364.                        Query whether the command is on the whitelist [P]
  365.   --list-lockdown-whitelist-contexts
  366.                        List all contexts that are on the whitelist [P]
  367.   --add-lockdown-whitelist-context=<context>
  368.                        Add the context context to the whitelist [P]
  369.   --remove-lockdown-whitelist-context=<context>
  370.                        Remove the context from the whitelist [P]
  371.   --query-lockdown-whitelist-context=<context>
  372.                        Query whether the context is on the whitelist [P]
  373.   --list-lockdown-whitelist-uids
  374.                        List all user ids that are on the whitelist [P]
  375.   --add-lockdown-whitelist-uid=<uid>
  376.                        Add the user id uid to the whitelist [P]
  377.   --remove-lockdown-whitelist-uid=<uid>
  378.                        Remove the user id uid from the whitelist [P]
  379.   --query-lockdown-whitelist-uid=<uid>
  380.                        Query whether the user id uid is on the whitelist [P]
  381.   --list-lockdown-whitelist-users
  382.                        List all user names that are on the whitelist [P]
  383.   --add-lockdown-whitelist-user=<user>
  384.                        Add the user name user to the whitelist [P]
  385.   --remove-lockdown-whitelist-user=<user>
  386.                        Remove the user name user from the whitelist [P]
  387.   --query-lockdown-whitelist-user=<user>
  388.                        Query whether the user name user is on the whitelist [P]
  390. Panic Options
  391.   --panic-on           Enable panic mode
  392.   --panic-off          Disable panic mode
  393.   --query-panic        Query whether panic mode is enabled