firewall-cmdの設定確認系コマンド一覧

CentOS7.xで利用できるファイアーウォールのfirewall-cmdで、設定を確認できるコマンドの一覧です。

# ゾーンの一覧を見る
$ firewall-cmd --get-zones
block dmz drop external home internal public trusted work

# デフォルトのゾーンを確認
$ firewall-cmd --get-default-zone
public

# インターフェースの所属ゾーン
$ firewall-cmd --get-active-zones
public
interfaces: eth0

# アクティブなゾーンの設定を確認
$ firewall-cmd --list-all
public (active)
target: default
icmp-block-inversion: no
interfaces: eth0
sources:
services: dhcpv6-client ssh
ports: 80/tcp 22/tcp
protocols:
masquerade: no
forward-ports:
source-ports:
icmp-blocks:
rich rules:

# 全部のゾーンの設定を全部見る
$ firewall-cmd --list-all-zones
block
...

dmz
...

drop
...

...
public (active)
target: default
icmp-block-inversion: no
interfaces: eth0
sources:
services: dhcpv6-client ssh
ports: 80/tcp 22/tcp
protocols:
masquerade: no
forward-ports:
source-ports:
icmp-blocks:
rich rules:

# daemonの起動状態
$ firewall-cmd --state
running

# オープンしているアウトバウンドのポート
$ firewall-cmd --list-ports
80/tcp 22/tcp

# サービスの一覧
$ firewall-cmd --get-services
RH-Satellite-6 amanda-client amanda-k5-client bacula bacula-client bitcoin bitcoin-rpc bitcoin-testnet bitcoin-testnet-rpc ceph ceph-mon cfengine condor-collector ctdb dhcp dhcpv6 dhcpv6-client dns docker-registry dropbox-lansync elasticsearch freeipa-ldap freeipa-ldaps freeipa-replication freeipa-trust ftp ganglia-client ganglia-master high-availability http https imap imaps ipp ipp-client ipsec iscsi-target kadmin kerberos kibana klogin kpasswd kshell ldap ldaps libvirt libvirt-tls managesieve mdns mosh mountd ms-wbt mssql mysql nfs nrpe ntp openvpn ovirt-imageio ovirt-storageconsole ovirt-vmconsole pmcd pmproxy pmwebapi pmwebapis pop3 pop3s postgresql privoxy proxy-dhcp ptp pulseaudio puppetmaster quassel radius rpc-bind rsh rsyncd samba samba-client sane sip sips smtp smtp-submission smtps snmp snmptrap spideroak-lansync squid ssh synergy syslog syslog-tls telnet tftp tftp-client tinc tor-socks transmission-client vdsm vnc-server wbem-https xmpp-bosh xmpp-client xmpp-local xmpp-server

Amazonでおトクに買い物する方法