|
Command
|
Purpose
|
firewall-cmd --state |
Firewall status
|
firewall-cmd --get-active-zones |
Active zones
|
firewall-cmd --list-all |
List zone configuration
|
firewall-cmd --list-services |
Allowed services
|
|
`firewall-cmd --list-ports
|
Open ports
|
firewall-cmd --add-service=http --permanent |
Allow service
|
firewall-cmd --remove-service=http -permanent |
Remove service
|
firewall-cmd --add-port=80/tcp --permanent |
Open port
|
firewall-cmd --remove-port=80/tcp --permanent |
Close port
|
firewall-cmd --reload |
Reload rules
|
|
Command
|
Purpose
|
ufw enable |
Enable firewall
|
ufw disable |
Disable firewall
|
ufw status |
Show status
|
ufw status verbose |
Detailed status
|
ufw allow ssh |
Allow SSH
|
ufw allow 80/tcp |
Allow port
|
ufw deny 23 |
Deny port
|
ufw delete allow 80/tcp |
Remove rule
|
ufw reload |
Reload rules
|
ufw reset |
Reset firewall
|
|
Command
|
Purpose
|
sysctl net.ipv4.ip_forward |
Check status
|
sysctl -w net.ipv4.ip_forward=1 |
Enable temporarily
|
|
Command
|
Purpose
|
iptables -L |
List rules
|
iptables -L -n -v |
Detailed rules
|
iptables -F |
Flush rules
|
iptables -A INPUT ... |
Append rule
|
iptables -D |
Delete rule
|
iptables -I |
Insert rule
|
iptables -P INPUT DROP |
Set default policy
|
iptables-save |
Save rules
|
iptables-restore |
Restore rules
|
|
Command
|
ipset create |
ipset add |
ipset del |
ipset list |
ipset destroy |
|
Command
|
Purpose
|
iptables -t nat -L |
View NAT table
|
nft list table nat |
View nftables NAT rules
|
|
Command
|
Purpose
|
nft list ruleset |
Show all rules
|
nft flush ruleset |
Remove all rules
|
nft add table inet filter |
Create table
|
nft add chain ... |
Create chain
|
nft delete rule ... |
Delete rule
|
nft delete table ... |
Delete table
|
No comments yet.
Cheatography n. The art of mapping complex subjects into clear, instantly navigable reference guides.
