firewalld and iptables use

禁止某个ip访问

iptables -I INPUT -s 138.138.138.138 -j DROP

firewall  -cmd   --permanent   --add-rich-rule='rule family=ipv4   source   address="138.138.138.138"   drop'

端口转发

iptables   -t   nat   -A   PREROUTING   -p   tcp   --dport   80   -j   REDIRECT --to-port   8080