一.获取目前访问的接口
suse12sp3 # netstat -tunlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:8005 0.0.0.0:* LISTEN 2481/java
tcp 0 0 127.0.0.1:199 0.0.0.0:* LISTEN 2249/snmpd
二.修改防火墙策略
suse12sp3:~ # cd /etc/sysconfig
suse12sp3:~ # vi SuSEfirewall2
修改允许的端口号
--允许的端口号
FW_SERVICES_EXT_TCP="7800 8005 8009 8080 22"
--允许指定IP协议的端口范围（
FW_SERVICES_ACCEPT_EXT="192.168.0.225,tcp,50000"
--多地址写法
FW_SERVICES_ACCEPT_EXT="192.168.1.225 192.168.1.122,tcp,50000"
--多端口写法
FW_SERVICES_ACCEPT_EXT="192.168.1.225 192.168.1.122,tcp,22 50000"
--连续端口写法
FW_SERVICES_ACCEPT_EXT="192.168.1.225 192.168.1.122,tcp,22:50000"
三.开启防火墙策略
systemctl enable SuSEfirewall2.service
suse12sp3:~ # /etc/sysconfig # systemctl enable SuSEfirewall2.service
Created symlink from /etc/systemd/system/SuSEfirewall2_setup.service to /usr/lib/systemd/system/SuSEfirewall2.service.
Created symlink from /etc/systemd/system/multi-user.target.wants/SuSEfirewall2.service to /usr/lib/systemd/system/SuSEfirewall2.service.
Created symlink from /etc/systemd/system/multi-user.target.wants/SuSEfirewall2_init.service to /usr/lib/systemd/system/SuSEfirewall2_init.service.
四.启动防火墙
suse12sp3:~ #systemctl start SuSEfirewall2.service
或者
suse12sp3:~ #SuSEfirewall2 start
五.查看状态
suse12sp3:~ #systemctl status SuSEfirewall2.service
六.关闭防火墙
suse12sp3:~ #systemctl stop SuSEfirewall2.service
或者
suse12sp3:~ #SuSEfirewall2 stop