my-vault/01_Projects/Work/Government-Projects/Panyu-District/Panyu-Document/Issue-Handling.md

堡垒机： https://10.160.32.248 gwjh 1@qwaSzx202407

VPN： |https://218.20.201.210 gwjhgzzn gzpy135.com new:

Pygwjh@202409

114: root 114gZgw$jH0510M

115: root gZg115w$jH0510M

116: root gZgw116$jH0510M

176: root g@W2024.Jh

g@W2024.Jh

177: Gw@Jh2023.K

gZgw$jH1170510M

三台minio服务，端口9000 10.160.20.114、10.160.20.115、10.160.20.116 三台NGINX，端口80和443 10.160.20.176、10.160.20.177

firewalld whitelist

firewall-cmd --new-zone=whitelist --permanent
firewall-cmd --reload

14 firewall:

firewall-cmd --permanent --add-port=9000/tcp
firewall-cmd --permanent --add-port=9001/tcp
firewall-cmd --permanent --add-port=9100/tcp
firewall-cmd --reload

176/177:

firewall-cmd --permanent --add-service=http
firewall-cmd --permanent --add-service=https
firewall-cmd --reload

new white list: ip list: 10.160.20.112-119 10.160.20.102 10.160.20.107 10.160.20.110 10.160.20.176 10.160.20.177

firewall-cmd --zone=public --add-rich-rule='rule family="ipv4" source address="10.160.20.0/24" accept' --permanent
firewall-cmd --reload

remove:

firewall-cmd --zone=public --list-rich-rules --permanent
firewall-cmd --zone=public --remove-rich-rule='rule family="ipv4" source address="10.160.20.0/24" accept' --permanent
firewall-cmd --reload
firewall-cmd --list-all