文章目录
- 环境
- 文档用途
- 详细信息
环境
系统平台：Linux x86-64 Red Hat Enterprise Linux 7 版本：4.5.10
文档用途
本文适用于处理hghac8008端口漏洞户。
详细信息
1、服务器上添加防火墙规则，允许相应端口通过，以10.xx.xx.189、10.xx.xx.190、10.xx.xx.191为例
firewall-cmd –add-rich-rule="rule family="ipv4" source address="10.xx.xx.189" port protocol="tcp" port="8008" accept"
firewall-cmd –permanent –add-rich-rule="rule family="ipv4" source address="10.xx.xx.189" port protocol="tcp" port="8008" accept"
firewall-cmd –add-rich-rule="rule family="ipv4" source address="10.xx.xx.190" port protocol="tcp" port="8008" accept"
firewall-cmd –permanent –add-rich-rule="rule family="ipv4" source address="10.xx.xx.190" port protocol="tcp" port="8008" accept"
firewall-cmd –add-rich-rule="rule family="ipv4" source address="10.xx.xx.191" port protocol="tcp" port="8008" accept"
firewall-cmd –permanent –add-rich-rule="rule family="ipv4" source address="10.xx.xx.191" port protocol="tcp" port="8008" accept"
2、重载防火墙策略
firewall-cmd –reload
3、删除全局规则
firewall-cmd –permanent –remove-port=8008/tcp
firewall-cmd –remove-port=8008/tcp
防火墙规则生效优先级为：直接规则–富规则–区域规则
4、确定策略生效
firewall-cmd –list-all
