防火牆設定

1. mariadb 啟動後會監聽在 3306 port。

   [root@kvm3 ~]# ss -tlpn | grep mariadb
   LISTEN 0      80           0.0.0.0:3306      0.0.0.0:*    users:(("mariadbd",pid=5040,fd=20))
   LISTEN 0      80              [::]:3306         [::]:*    users:(("mariadbd",pid=5040,fd=21))
   

2. 允許遠端存取，防火牆必須開啟 3306 port，查看目前的防火牆，3306 port 沒開啟。

   [root@kvm3 ~]# firewall-cmd --list-all
   public (default, active)
     target: default
     ingress-priority: 0
     egress-priority: 0
     icmp-block-inversion: no
     interfaces: enp1s0
     sources:
     services: cockpit dhcpv6-client ssh
     ports:
     protocols:
     forward: yes
     masquerade: no
     forward-ports:
     source-ports:
     icmp-blocks:
     rich rules:
   

3. 加入開機設定開啟 3306/tcp 埠號。

   [root@kvm3 ~]# firewall-cmd --permanent --add-port=3306/tcp
   success
   

4. 重新載入防火牆設定。

   [root@kvm3 ~]# firewall-cmd --reload
   success
   

5. 再查詢防火牆設定，已開啟 3306/tcp 埠號。

   public (default, active)
     target: default
     ingress-priority: 0
     egress-priority: 0
     icmp-block-inversion: no
     interfaces: enp1s0
     sources:
     services: cockpit dhcpv6-client ssh
     ports: 3306/tcp
     protocols:
     forward: yes
     masquerade: no
     forward-ports:
     source-ports:
     icmp-blocks:
     rich rules: