堡垒机：
https://10.160.32.248
gwjh
1@qwaSzx202407

|   |   |   |
|---|---|---|
  
VPN：
|[https://218.20.201.210](https://218.20.201.210/)
gwjhgzzn
gzpy135.com
new:
```
Pygwjh@202409
```



114:
root
114gZgw$jH0510M

115:
root
gZg115w$jH0510M

116:
root
gZgw116$jH0510M

176:
root
g@W2024.Jh
```
g@W2024.Jh
```

177:
Gw@Jh2023.K
```
gZgw$jH1170510M
```





三台minio服务，端口9000
10.160.20.114、10.160.20.115、10.160.20.116
三台NGINX，端口80和443
10.160.20.176、10.160.20.177



firewalld whitelist

```bash

firewall-cmd --new-zone=whitelist --permanent
firewall-cmd --reload
```

14 firewall:
```
firewall-cmd --permanent --add-port=9000/tcp
firewall-cmd --permanent --add-port=9001/tcp
firewall-cmd --permanent --add-port=9100/tcp
firewall-cmd --reload
```


176/177:
```bash

firewall-cmd --permanent --add-service=http
firewall-cmd --permanent --add-service=https
firewall-cmd --reload

```


new white list:
ip list:
10.160.20.112-119
10.160.20.102
10.160.20.107
10.160.20.110
10.160.20.176
10.160.20.177

```bash
firewall-cmd --zone=public --add-rich-rule='rule family="ipv4" source address="10.160.20.0/24" accept' --permanent
firewall-cmd --reload
```


remove:

```shell
firewall-cmd --zone=public --list-rich-rules --permanent
firewall-cmd --zone=public --remove-rich-rule='rule family="ipv4" source address="10.160.20.0/24" accept' --permanent
firewall-cmd --reload
firewall-cmd --list-all
```