blocks|key|2755673|text|您可以从/etc/firewalld/zones+(或/usr/etc/firewalld/zones，取决于发行版)中删除包含自定义区域规则的文件。之后，用firewalld重新加载firewall-cmd+--complete-reload，它应该开始使用默认设置。当您更改区域规则时，文件将再次出现在该目录中。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2755674|至于iptables，您可以使用iptables+-F重置所有规则。重新启动也同样有效，除非您实现了某种持久化。请注意，firewalld可能被配置为使用iptables作为后端，这意味着它将根据您在其区域规则中指定的内容添加或删除iptables规则本身。|entityMap^0|4|K|R|O|27|9|2K|U|0|2|8|G|B|1O|9|25|8|38|8^^$0|@$1|2|3|4|5|6|7|I|8|@$9|J|A|K|B|C]|$9|L|A|M|B|C]|$9|N|A|O|B|C]|$9|P|A|Q|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|R|8|@$9|S|A|T|B|C]|$9|U|A|V|B|C]|$9|W|A|X|B|C]|$9|Y|A|Z|B|C]|$9|10|A|11|B|C]]|D|@]|E|$]]]|H|$]]

You may simply delete the files containing the customized zone rules from <code>/etc/firewalld/zones</code> (or <code>/usr/etc/firewalld/zones</code>, depending on the distribution). After that, reload <code>firewalld</code> with <code>firewall-cmd --complete-reload</code>, and it should start using the default settings. When you make changes to the zone rules, files will appear again in that directory.

As for <code>iptables</code>, you may reset all rules with <code>iptables -F</code>. Rebooting works as well, unless you implemented some sort of persistency. Beware that <code>firewalld</code> may be configured to use <code>iptables</code> as its backend, which means it will add or remove <code>iptables</code> rules itself, according to what you specified in its zone rules.

blocks|key|2755737|text|如果你真的想删除约翰·阿什普尔所说的一切|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2755738|rm+-rf+/etc/firewalld/zones或/usr/etc/firewalld/zone取决于您的发行版|offset|length|style|CODE|2755739|和|2755740|iptables+-X
iptables+-F
iptables+-Z|code-block|syntax|javascript|2755741|加号|2755742|systemctl+restart+firewalld|2755743|然后你有了一套新的规则和区域;)|entityMap^0|0|0|R|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|V|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|W|8|@$D|X|E|Y|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|Z|8|@]|9|@]|A|$]]|$1|J|3|K|5|L|7|10|8|@]|9|@]|A|$M|N]]|$1|O|3|P|5|6|7|11|8|@]|9|@]|A|$]]|$1|Q|3|R|5|L|7|12|8|@]|9|@]|A|$M|N]]|$1|S|3|T|5|6|7|13|8|@]|9|@]|A|$]]]|U|$]]

If you trully want to delete everything as John Ashpool say's 

<code>rm -rf /etc/firewalld/zones</code> or /usr/etc/firewalld/zones depending on your distro 

and 

<pre><code>iptables -X
iptables -F
iptables -Z
</code></pre>

plus 

<pre><code>systemctl restart firewalld
</code></pre>

and then you have a new set of rules and zones ;)

blocks|key|2796092|text|就我个人而言，我只想从您编辑的所有区域中删除所有服务和规则。除了SSH，以防您正在远程服务器上工作。这很简单：sudo+firewall-cmd+--zone=WHATEVER+--remove-service=WHATEVER|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2796093|毕竟已经被移除了，只有sudo+firewall-cmd+--runtime-to-permanent|2796094|但是:如果您没有保存防火墙规则，那么只需使用systemctl+restart+firewalld重新启动即可|2796095|我不认为里面有任何重置功能。|entityMap^0|1J|1N|0|B|14|0|M|R|0^^$0|@$1|2|3|4|5|6|7|M|8|@$9|N|A|O|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|P|8|@$9|Q|A|R|B|C]]|D|@]|E|$]]|$1|H|3|I|5|6|7|S|8|@$9|T|A|U|B|C]]|D|@]|E|$]]|$1|J|3|K|5|6|7|V|8|@]|D|@]|E|$]]]|L|$]]

Personally I would just remove all the services and rules from all the zones you have edited. Except for SSH in case you are working on a remote server. That is easy: <code>sudo firewall-cmd --zone=WHATEVER --remove-service=WHATEVER</code>

And after all have been removed, just <code>sudo firewall-cmd --runtime-to-permanent</code>

HOWEVER: If you haven't saved the firewall rules, then just restart with <code>systemctl restart firewalld</code>

I don't think there is any reset function in it.

blocks|key|2755858|text|随发行版附带的任何默认zones+(如果修改)都会被复制到/etc/firewalld/zones目录中。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2755859|这也意味着default区域文件的来源不是这个目录，重新安装不知道这个目录下的文件(/etc/firewalld/zones)，所以通过重新安装这些文件将是untouched。除非删除这些文件，否则firewalld将继续从此目录加载您的修改。|2755860|您可以从/etc/firewalld/zones备份和删除所有这些文件(安全)，然后重新启动firewalld，然后返回到默认的发行版已安装区域配置。|2755861|从某种意义上说，默认的分发区域配置默认允许SSH，这是安全的。但是，如果您通过不同于22的SSH端口登录到此服务器，或者通过任何非SSH的方式登录，则需要小心，从/etc/firewalld/zones中删除所有这些文件。|blockquote|2755862|sudo+cp+-pR+/etc/firewalld/zones+/etc/firewalld/zones.bak
sudo+rm+-f+/etc/firewalld/zones/*
sudo+systemctl+restart+firewalld|code-block|syntax|javascript|2755863|如果修改了任何其他配置文件，则可以重新安装firewalld本身，但是，需要下载firewalld+RPM来重新安装它。|2755864|安装yum-downloadonly插件：|2755865|(RHEL5)
#+yum+install+yum-downloadonly
(RHEL6,+RHEL7)
#+yum+install+yum-plugin-downloadonly|2755866|在使用插件之前，请检查/etc/yum/pluginconf.d/downloadonly.conf以确认此插件是enabled=1。|2755867|#+yum+install+--downloadonly+--downloaddir=/tmp+firewalld
#+rpm+-ivh+--force+/tmp/firewalld*.rpm|2755868|顺便说一句，yum+reinstall+firewalld不会替换修改过的配置文件。|entityMap^0|B|5|T|K|0|5|7|16|K|26|9|0|4|K|0|29|K|0|0|0|2|G|0|0|B|13|1L|9|0|0|6|N^^$0|@$1|2|3|4|5|6|7|14|8|@$9|15|A|16|B|C]|$9|17|A|18|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|19|8|@$9|1A|A|1B|B|C]|$9|1C|A|1D|B|C]|$9|1E|A|1F|B|C]]|D|@]|E|$]]|$1|H|3|I|5|6|7|1G|8|@$9|1H|A|1I|B|C]]|D|@]|E|$]]|$1|J|3|K|5|L|7|1J|8|@$9|1K|A|1L|B|C]]|D|@]|E|$]]|$1|M|3|N|5|O|7|1M|8|@]|D|@]|E|$P|Q]]|$1|R|3|S|5|6|7|1N|8|@]|D|@]|E|$]]|$1|T|3|U|5|6|7|1O|8|@$9|1P|A|1Q|B|C]]|D|@]|E|$]]|$1|V|3|W|5|O|7|1R|8|@]|D|@]|E|$P|Q]]|$1|X|3|Y|5|6|7|1S|8|@$9|1T|A|1U|B|C]|$9|1V|A|1W|B|C]]|D|@]|E|$]]|$1|Z|3|10|5|O|7|1X|8|@]|D|@]|E|$P|Q]]|$1|11|3|12|5|L|7|1Y|8|@$9|1Z|A|20|B|C]]|D|@]|E|$]]]|13|$]]

Any default <code>zones</code> that come with distribution, if modified, get copied to <code>/etc/firewalld/zones</code> directory with those modifications. 

Which also means that the source of <code>default</code> zone files is not this directory and re-installation doesn't know about the files under this directory (<code>/etc/firewalld/zones</code>) so these files will be <code>untouched</code> by reinstallation. Unless these files are removed, firewalld continues to load your modifications from this directory.

You can backup and delete all those files (safely) from <code>/etc/firewalld/zones</code> and restart firewalld which then comes back to default distribution installed zone configurations. 

<blockquote>
 It is safe in a sense that, the default distribution zone
 configurations allow SSH by default. However, if you logged into this
 server via a different port of SSH than 22 or by any other means than
 SSH, then you need to be careful, removing all those files from
 <code>/etc/firewalld/zones</code>
</blockquote>

<pre><code>sudo cp -pR /etc/firewalld/zones /etc/firewalld/zones.bak
sudo rm -f /etc/firewalld/zones/*
sudo systemctl restart firewalld
</code></pre>

In case any other config files are modified, the firewalld itself can be reinstalled, however, the firewalld RPM needs to be downloaded to reinstall it.

Install <code>yum-downloadonly</code> plugin:

<pre><code>(RHEL5)
# yum install yum-downloadonly
(RHEL6, RHEL7)
# yum install yum-plugin-downloadonly
</code></pre>

Before using the plugin, check <code>/etc/yum/pluginconf.d/downloadonly.conf</code> to confirm that this plugin is <code>enabled=1</code>

<pre><code># yum install --downloadonly --downloaddir=/tmp firewalld
# rpm -ivh --force /tmp/firewalld*.rpm
</code></pre>

<blockquote>
 BTW <code>yum reinstall firewalld</code> doesn't replace the modified config
 files.
</blockquote>

On CentOS 7 have I been trying out different firewalld rules and iptables commands, and now want to do it all over, but only using firewalld.

Question

How can I reset all rules to the default that CentOS 7's firewalld ships with?

Reset firewalld rules to default?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

在CentOS 7上，我已经尝试过不同的firewalld规则和iptables命令，现在我想在所有的地方都这样做，但只使用firewalld。问题如何将所有规则重置为CentOS 7's防火墙附带的默认规则？

问将消防规则重置为默认规则？
EN

问题

回答 4

Server Fault用户

Server Fault用户

Server Fault用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问将消防规则重置为默认规则？EN

问题

回答 4

Server Fault用户

Server Fault用户

Server Fault用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问将消防规则重置为默认规则？
EN