热门标签
热门文章
- 1llama-factory简介_llama factory
- 2文学-谚语：谚语
- 3NSA的Windows漏洞军火库泄漏：多个零日、利用工具可直接使用
- 42024年最全（一）大数据---Hadoop整体介绍（架构层）----（组件，并发知识体系大全_大数据架构
- 5请做好3年内随时失业的准备？
- 6基于微信小程序的食堂餐厅门店扫码点餐的设计与实现（源码+论文）_v_190_基于微信小程序的微信点餐系统小程序的设计与实现论文
- 7解决Git LFS Smudge过滤器失败的问题 - Python实现_smudge 过滤器 lfs 失败
- 8python编程案例教程答案-Python基础案例教程
- 9三教父神仙打架！AI瓶颈问题的三个解决方案！_如何改进人工智能的泛化瓶颈
- 10springBoot启动提示If you want an embedded database (H2, HSQL or Derby), please put i
当前位置: article > 正文
shell和go实现：防火墙放行所有端口，唯独拦截80端口_华三防火墙放行所有端口命令
作者：小蓝xlanll | 2024-05-31 05:51:25
赞
踩
华三防火墙放行所有端口命令
shell
1.防火墙放行所有端口，唯独拦截80端口
1.1拦截
mkdir -p /data/shells
cat > /data/shells/02nginx_close.sh <<-'EOF'
#!/bin/bash
# 检查Linux系统版本
linux_version=$(cat /etc/redhat-release)
# 根据Linux系统版本选择相应的防火墙开启命令和保存规则命令
if [[ $linux_version == *"7"* || $linux_version == *"8"* ]]; then
firewall_cmd="systemctl status firewalld"
save_rules_cmd="firewall-cmd --zone=public --add-rich-rule='rule family="ipv4" port port="80" protocol="tcp" reject' && firewall-cmd --reload"
elif [[ $linux_version == *"6"* || $linux_version == *"5"* ]]; then
firewall_cmd="service iptables status"
save_rules_cmd="service iptables save"
else
echo "Unsupported Linux version."
exit 1
fi
# 执行防火墙命令并检查状态
firewall_status=$($firewall_cmd)
if [[ $firewall_status == *"is stopped"* || $firewall_status == *"not running"* || $firewall_status == *"inactive"* ]]; then
# 如果防火墙处于关闭状态，则启动防火墙
if [[ $linux_version == *"7"* || $linux_version == *"8"* ]]; then
systemctl start firewalld
elif [[ $linux_version == *"6"* || $linux_version == *"5"* ]]; then
service iptables start
fi
fi
# 开启防火墙放行所有端口，拦截部分端口
iptables -A INPUT -p tcp --dport 80 -j DROP
iptables -A INPUT -j ACCEPT
# 保存iptables规则
eval $save_rules_cmd
EOF
chmod +x /data/shells/*sh
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
- 32
- 33
- 34
- 35
- 36
- 37
- 38
- 39
- 40
- 41
- 42
- 43
- 44
eval 是一个 Bash 内置命令，用于执行由字符串表示的命令。在这种情况下，$save_rules_cmd 是一个包含保存规则命令的字符串变量。
使用 eval $save_rules_cmd 的目的是将保存规则的命令作为字符串解析并执行。通过这种方式，可以根据不同的 Linux 系统版本动态地执行正确的保存规则命令，而无需硬编码特定的命令。
简而言之，eval $save_rules_cmd 将字符串变量 $save_rules_cmd 中的命令作为实际的命令执行。
1.2 删除拦截
cat > /data/shells/03nginx_kaiqi.sh <<-'EOF'
#!/bin/bash
# 检查Linux系统版本
linux_version=$(cat /etc/redhat-release)
# 根据Linux系统版本选择相应的防火墙开启命令和保存规则命令
if [[ $linux_version == *"7"* || $linux_version == *"8"* ]]; then
firewall_cmd="systemctl status firewalld"
save_rules_cmd="firewall-cmd --zone=public --remove-rich-rule='rule family="ipv4" port port="80" protocol="tcp" reject' && firewall-cmd --reload"
elif [[ $linux_version == *"6"* || $linux_version == *"5"* ]]; then
firewall_cmd="service iptables status"
save_rules_cmd="service iptables save"
else
echo "Unsupported Linux version."
exit 1
fi
# 执行防火墙命令并检查状态
firewall_status=$($firewall_cmd)
if [[ $firewall_status == *"is stopped"* || $firewall_status == *"not running"* || $firewall_status == *"inactive"* ]]; then
# 如果防火墙处于关闭状态，则启动防火墙
if [[ $linux_version == *"7"* || $linux_version == *"8"* ]]; then
systemctl start firewalld
elif [[ $linux_version == *"6"* || $linux_version == *"5"* ]]; then
service iptables start
fi
fi
# 删除防火墙放行所有端口，拦截部分端口
iptables -D INPUT -p tcp --dport 80 -j DROP
iptables -D INPUT -j ACCEPT
# 保存iptables规则
eval $save_rules_cmd
EOF
chmod +x /data/shells/*sh
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
- 32
- 33
- 34
- 35
- 36
- 37
- 38
- 39
- 40
- 41
- 42
- 43
- 44
- 45
- 46
GO语言
开始拦截
package main
import (
"bytes"
"fmt"
"log"
"os/exec"
"strings"
)
func main() {
// 查看系统版本
linuxVersion, err := executeCommand("cat /etc/redhat-release")
if err != nil {
log.Fatalf("Error executing command: %v", err)
}
fmt.Println("系统版本：", linuxVersion)
// 查看防火墙状态并启动防火墙
if strings.Contains(linuxVersion, "release 7") {
isFirewallDisabled(linuxVersion)
addFirewallRule(linuxVersion)
} else if strings.Contains(linuxVersion, "release 6") {
isFirewallDisabled(linuxVersion)
addFirewallRule(linuxVersion)
} else {
fmt.Println("未知的系统版本，无法查看防火墙状态")
return
}
}
func executeCommand(command string) (string, error) {
cmd := exec.Command("bash", "-c", command)
var out bytes.Buffer
cmd.Stdout = &out
err := cmd.Run()
if err != nil {
return "", err
}
return out.String(), nil
}
func isFirewallDisabled(linuxVersion string) {
if strings.Contains(linuxVersion, "release 7") {
cmd := exec.Command("sudo", "systemctl", "status", "firewalld")
out, err := cmd.Output()
if err != nil {
fmt.Printf("systemctl status firewalld error: %v\n", err)
}
output := string(out)
if strings.Contains(output, "Active: inactive") {
startFirewalld()
}
} else if strings.Contains(linuxVersion, "release 6") {
cmd := exec.Command("sudo", "service", "iptables", "status")
out, err := cmd.Output()
if err != nil {
fmt.Printf("service iptables status error: %v\n", err)
}
output := string(out)
if strings.Contains(output, "not running") {
startIptables()
}
}
}
func startFirewalld() {
cmd := exec.Command("sudo", "systemctl", "start", "firewalld")
err := cmd.Run()
if err != nil {
fmt.Printf("Command execution failed with error: %v\n", err)
}
fmt.Println("7防火墙已启动")
}
func startIptables() {
cmd := exec.Command("sudo", "service", "iptables", "start")
err := cmd.Run()
if err != nil {
fmt.Printf("Command execution failed with error: %v\n", err)
}
fmt.Println("6防火墙已启动")
}
func addFirewallRule(linuxVersion string) {
if strings.Contains(linuxVersion, "release 7") {
cmd := exec.Command("sudo", "firewall-cmd", "--permanent", "--zone=public", "--add-rich-rule=rule family=\"ipv4\" port port=\"80\" protocol=\"tcp\" reject")
err := cmd.Run()
if err != nil {
fmt.Printf("Command execution failed with error: %v\n", err)
}
cmd = exec.Command("sudo", "firewall-cmd", "--reload")
err = cmd.Run()
if err != nil {
fmt.Printf("Command execution failed with error: %v\n", err)
}
} else if strings.Contains(linuxVersion, "release 6") {
cmd := exec.Command("sudo", "iptables", "-A", "INPUT", "-p", "tcp", "--dport", "80", "-j", "DROP")
err := cmd.Run()
if err != nil {
fmt.Printf("Command execution failed with error: %v\n", err)
}
cmd = exec.Command("sudo", "iptables", "-A", "INPUT", "-j", "ACCEPT")
err = cmd.Run()
if err != nil {
fmt.Printf("Command execution failed with error: %v\n", err)
}
}
}
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
- 32
- 33
- 34
- 35
- 36
- 37
- 38
- 39
- 40
- 41
- 42
- 43
- 44
- 45
- 46
- 47
- 48
- 49
- 50
- 51
- 52
- 53
- 54
- 55
- 56
- 57
- 58
- 59
- 60
- 61
- 62
- 63
- 64
- 65
- 66
- 67
- 68
- 69
- 70
- 71
- 72
- 73
- 74
- 75
- 76
- 77
- 78
- 79
- 80
- 81
- 82
- 83
- 84
- 85
- 86
- 87
- 88
- 89
- 90
- 91
- 92
- 93
- 94
- 95
- 96
- 97
- 98
- 99
- 100
- 101
- 102
- 103
- 104
- 105
- 106
- 107
- 108
- 109
- 110
- 111
- 112
- 113
- 114
- 115
- 116
- 117
- 118
- 119
删除拦截端口，关闭防火墙
package main
import (
"bytes"
"fmt"
"log"
"os/exec"
"strings"
)
func main() {
// 查看系统版本
linuxVersion, err := executeCommand("cat /etc/redhat-release")
if err != nil {
log.Fatalf("Error executing command: %v", err)
}
fmt.Println("系统版本：", linuxVersion)
// 查看防火墙状态并启动防火墙
if strings.Contains(linuxVersion, "release 7") {
isFirewallDisabled(linuxVersion)
addFirewallRule(linuxVersion)
} else if strings.Contains(linuxVersion, "release 6") {
isFirewallDisabled(linuxVersion)
addFirewallRule(linuxVersion)
} else {
fmt.Println("未知的系统版本，无法查看防火墙状态")
return
}
}
func executeCommand(command string) (string, error) {
cmd := exec.Command("bash", "-c", command)
var out bytes.Buffer
cmd.Stdout = &out
err := cmd.Run()
if err != nil {
return "", err
}
return out.String(), nil
}
func isFirewallDisabled(linuxVersion string) {
if strings.Contains(linuxVersion, "release 7") {
cmd := exec.Command("sudo", "systemctl", "status", "firewalld")
out, err := cmd.Output()
if err != nil {
fmt.Printf("systemctl status firewalld error: %v\n", err)
}
output := string(out)
if strings.Contains(output, "Active: inactive") {
startFirewalld()
}
} else if strings.Contains(linuxVersion, "release 6") {
cmd := exec.Command("sudo", "service", "iptables", "status")
out, err := cmd.Output()
if err != nil {
fmt.Printf("service iptables status error: %v\n", err)
}
output := string(out)
if strings.Contains(output, "not running") {
startIptables()
}
}
}
func startFirewalld() {
cmd := exec.Command("sudo", "systemctl", "start", "firewalld")
err := cmd.Run()
if err != nil {
fmt.Printf("Command execution failed with error: %v\n", err)
}
fmt.Println("7防火墙已启动")
}
func startIptables() {
cmd := exec.Command("sudo", "service", "iptables", "start")
err := cmd.Run()
if err != nil {
fmt.Printf("Command execution failed with error: %v\n", err)
}
fmt.Println("6防火墙已启动")
}
func addFirewallRule(linuxVersion string) {
if strings.Contains(linuxVersion, "release 7") {
cmd := exec.Command("sudo", "firewall-cmd", "--permanent", "--zone=public", "--remove-rich-rule=rule family=\"ipv4\" port port=\"80\" protocol=\"tcp\" reject")
err := cmd.Run()
if err != nil {
fmt.Printf("Command execution failed with error: %v\n", err)
}
cmd = exec.Command("sudo", "firewall-cmd", "--reload")
err = cmd.Run()
if err != nil {
fmt.Printf("Command execution failed with error: %v\n", err)
}
cmd = exec.Command("sudo", "systemctl", "stop", "firewalld")
err = cmd.Run()
if err != nil {
fmt.Printf("Command execution failed with error: %v\n", err)
}
} else if strings.Contains(linuxVersion, "release 6") {
cmd := exec.Command("sudo", "iptables", "-D", "INPUT", "-p", "tcp", "--dport", "80", "-j", "DROP")
err := cmd.Run()
if err != nil {
fmt.Printf("Command execution failed with error: %v\n", err)
}
cmd = exec.Command("sudo", "iptables", "-D", "INPUT", "-j", "ACCEPT")
err = cmd.Run()
if err != nil {
fmt.Printf("Command execution failed with error: %v\n", err)
}
cmd = exec.Command("sudo", "service", "iptables", "stop")
err = cmd.Run()
if err != nil {
fmt.Printf("Command execution failed with error: %v\n", err)
}
}
}
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
- 32
- 33
- 34
- 35
- 36
- 37
- 38
- 39
- 40
- 41
- 42
- 43
- 44
- 45
- 46
- 47
- 48
- 49
- 50
- 51
- 52
- 53
- 54
- 55
- 56
- 57
- 58
- 59
- 60
- 61
- 62
- 63
- 64
- 65
- 66
- 67
- 68
- 69
- 70
- 71
- 72
- 73
- 74
- 75
- 76
- 77
- 78
- 79
- 80
- 81
- 82
- 83
- 84
- 85
- 86
- 87
- 88
- 89
- 90
- 91
- 92
- 93
- 94
- 95
- 96
- 97
- 98
- 99
- 100
- 101
- 102
- 103
- 104
- 105
- 106
- 107
- 108
- 109
- 110
- 111
- 112
- 113
- 114
- 115
- 116
- 117
- 118
- 119
- 120
- 121
- 122
- 123
- 124
- 125
- 126
- 127
- 128
- 129
- 130
- 131
- 132
Windows编译Linux可执行文件
如果我想在Windows下编译一个Linux下可执行文件，那需要怎么做呢？只需要在编译时指定目标操作系统的平台和处理器架构即可。
注意：无论你在Windows电脑上使用VsCode编辑器还是Goland编辑器，都要注意你使用的终端类型，因为不同的终端下命令不一样！！！目前的Windows通常默认使用的是PowerShell终端。
如果你的Windows使用的是cmd，那么按如下方式指定环境变量。
1，go 打包windows exe运行文件
如果设置过其他系统环境 就要重新设置设置系统环境
$env:GOOS = "windows"
$env:GOARCH = "amd64"
go build hello.go
2.go打包 linux运行文件
如果设置过其他系统环境 就要重新设置设置系统环境
$env:GOOS = "linux"
$env:GOARCH = "amd64"
go build hello.go
#查看变量
go env
#修改环境变量
go env -w GOOS="windows"
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
声明：本文内容由网友自发贡献，不代表【wpsshop博客】立场，版权归原作者所有，本站不承担相应法律责任。如您发现有侵权的内容，请联系我们。转载请注明出处：https://www.wpsshop.cn/w/小蓝xlanll/article/detail/650678
推荐阅读
相关标签
