99 lines
1.4 KiB
Markdown
Executable File
99 lines
1.4 KiB
Markdown
Executable File
|
||
堡垒机：
|
||
https://10.160.32.248
|
||
gwjh
|
||
1@qwaSzx202407
|
||
|
||
| | | |
|
||
|---|---|---|
|
||
|
||
VPN：
|
||
|[https://218.20.201.210](https://218.20.201.210/)
|
||
gwjhgzzn
|
||
gzpy135.com
|
||
new:
|
||
```
|
||
Pygwjh@202409
|
||
```
|
||
|
||
|
||
|
||
114:
|
||
root
|
||
114gZgw$jH0510M
|
||
|
||
115:
|
||
root
|
||
gZg115w$jH0510M
|
||
|
||
116:
|
||
root
|
||
gZgw116$jH0510M
|
||
|
||
176:
|
||
root
|
||
g@W2024.Jh
|
||
|
||
177:
|
||
Gw@Jh2023.K
|
||
|
||
|
||
|
||
|
||
三台minio服务，端口9000
|
||
10.160.20.114、10.160.20.115、10.160.20.116
|
||
三台NGINX，端口80和443
|
||
10.160.20.176、10.160.20.177
|
||
|
||
|
||
|
||
firewalld whitelist
|
||
|
||
```bash
|
||
|
||
firewall-cmd --new-zone=whitelist --permanent
|
||
firewall-cmd --reload
|
||
```
|
||
|
||
14 firewall:
|
||
```
|
||
firewall-cmd --permanent --add-port=9000/tcp
|
||
firewall-cmd --permanent --add-port=9001/tcp
|
||
firewall-cmd --permanent --add-port=9100/tcp
|
||
firewall-cmd --reload
|
||
```
|
||
|
||
|
||
176/177:
|
||
```bash
|
||
|
||
firewall-cmd --permanent --add-service=http
|
||
firewall-cmd --permanent --add-service=https
|
||
firewall-cmd --reload
|
||
|
||
```
|
||
|
||
|
||
new white list:
|
||
ip list:
|
||
10.160.20.112-119
|
||
10.160.20.102
|
||
10.160.20.107
|
||
10.160.20.110
|
||
10.160.20.176
|
||
10.160.20.177
|
||
|
||
```bash
|
||
firewall-cmd --zone=public --add-rich-rule='rule family="ipv4" source address="10.160.20.0/24" accept' --permanent
|
||
firewall-cmd --reload
|
||
```
|
||
|
||
|
||
remove:
|
||
|
||
```shell
|
||
firewall-cmd --zone=public --list-rich-rules --permanent
|
||
firewall-cmd --zone=public --remove-rich-rule='rule family="ipv4" source address="10.160.20.0/24" accept' --permanent
|
||
firewall-cmd --reload
|
||
firewall-cmd --list-all
|
||
``` |