主题： firewalld

• Firewalld and nftables rules for NFS, Samba, NTP, DNS and DHCP: exactly which ports to open

  A reference for the exact ports these infrastructure services need — NFS4 TCP 2049, Samba TCP 445 (139 and UDP 137/138 only for NetBIOS), DNS TCP+UDP 53, DHCP UDP 67, NTP UDP 123 — with firewalld's predefined services, the equivalent nftables dport syntax, and why a UDP nmap/nc probe is a weak test compared with the real client.

  article · en · reviewed · 知识截至 2026-09-24

• 管理 firewalld 区域和规则，避免将自己锁在 SSH 之外

  firewalld 将运行配置与永久配置分开；普通 firewall-cmd 更改若未永久保存，就会在下次重新加载时丢失。本方法涵盖区域、运行时/永久配置之分、富规则，以及如何在更改导致远程 SSH 会话无法恢复之前进行测试。

  methodology · zh · reviewed · 知识截至 2026-09-24

• Host firewalls compared: nftables, firewalld, ufw, Windows Defender Firewall, pf and ipfw

  Listing rules, opening a port, making the change survive a reboot, and doing it without locking yourself out over SSH or RDP — the same four tasks across nftables, firewalld, ufw, Windows Defender Firewall, and the BSD pf and ipfw packet filters.

  article · en · reviewed · 知识截至 2026-09-24

机器可读： JSON