firewalled centos7

zone绑定网卡

firewall-cmd --zone=internal --add-interface=ens192 --permanent 

firewall-cmd --permanent --zone=internal --add-rich-rule="rule family="ipv4" source address="192.168.10.0/24" accept"

[root@byos000 system]# firewall-cmd --get-active-zones
internal
interfaces: ens192
public
interfaces: ens160

[root@byos000 system]# firewall-cmd --permanent --zone=internal --add-rich-rule="rule family="ipv4" port protocol="tcp" port="123" accept"
success
You have mail in /var/spool/mail/root
[root@byos000 system]# firewall-cmd --permanent --zone=internal --add-rich-rule="rule family="ipv4" port protocol="udp" port="123" accept"
success
[root@byos000 system]# firewall-cmd --reload
success

firewall-cmd --permanent --zone=public --add-rich-rule="rule family="ipv4" source address="192.168.10.0/24" accept"

添加一个网段内网互通

firewall-cmd --permanent --zone=public --add-rich-rule="rule family="ipv4" source address="106.39.102.1xx" port protocol="tcp" port="9100-9200" accept"

添加一个ip开放某个端口范围

最后规则生效

firewall-cmd --reload