firewalld防火墙制定internal从某端口进出

admin

[root@ ~]# firewall-cmd --permanent --zone=internal --change-interface=enp0s3
The interface is under control of NetworkManager, setting zone to 'internal'.
! g8 {0 S- v2 s, y% ]' usuccess
' A8 B4 E2 K! b7 ]0 E+ \[root@ ~]# firewall-cmd --reload
success
% \% h4 f- R7 y0 v[root@ ~]# firewall-cmd  --zone=internal --list-all
: [' C+ Q0 g! E: Y3 Hinternal (active)
& l3 z$ |5 q  ~: ^8 E  target: default
0 |6 n3 Q% G- b9 B  icmp-block-inversion: no
" J& U. E8 O$ B) q: V) `& j+ g$ `  interfaces: enp0s3
  sources:
4 {+ @$ v% _, m- P. s: a  services: ssh mdns samba-client dhcpv6-client
6 z- ]" J) M" t  ports: 123/udp 4952/udp
  protocols:
5 Y9 K# U- c) P0 }( H! W  masquerade: no
  forward-ports:
4 w1 z: R! ]4 i. h  source-ports:
( A3 \7 j" m# }, q  j  V  icmp-blocks:
  rich rules:

9 w. |  i& I5 q' _