一个可以动态修改防火墙信任的程序

go env -w GOPROXY=https://mirrors.aliyun.com/goproxy/

CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o build/dfw_linux_amd64 main.go
CGO_ENABLED=0 GOOS=linux GOARCH=arm64 go build -o build/dfw_linux_arm64 main.go
CGO_ENABLED=0 GOOS=darwin GOARCH=amd64 go build -o build/dfw_mac_amd64 main.go
CGO_ENABLED=0 GOOS=windows GOARCH=amd64 go build -o build/dfw_windows_amd64.exe main.go

#curl -o dfw https://gitee.com/sorc/dfws/attach_files/1103945/download/dfw_linux_amd64 -O -L

# 给执行权限
chmod +x dfw
# 生成证书 会生成testid.key 和 testid.pub两个文件，分别是服务器秘钥 和客户端秘钥
./dfw genKey -id testid

# 服务端安装
./dfw install
# 启动服务
systemctl start dfw
# 停止服务
systemctl stop dfw
# 查看服务状态
systemctl status dfw

#debain ubuntu 开启端口防火墙
systemctl enable ufw && systemctl start ufw && ufw enbale
# 允许端口访问
ufw allow 6760/tcp
# 查看防火墙策略
ufw statusls

#centos redhat 开启端口防火墙
systemctl enable firewalld && systemctl start firewalld
# 允许端口访问
firewall-cmd --permanent --zone=public --add-port=6760/tcp && firewall-cmd --reload
# 查看防火墙
firewall-cmd --list-all
# 查看信任策略
firewall-cmd --list-all --zone=trusted
# 删除信任ip
firewall-cmd --permanent --zone=trusted --remove-source=  && firewall-cmd --reload

# 给执行权限
chmod +x dfw
/datadisk/dfw/dfw dns -id mgrip.sction.org -checkPort 1080
crontab -e
0/10 * * * * flock -xn /tmp/dfw_1.lock -c '/datadisk/dfw/dfw dns -id mgrip.sction.org > /dev/null 2>&1 &'
3/10 * * * * flock -xn /tmp/dfw_2.lock -c '/datadisk/dfw/dfw dns -id mgrip.sction.cn > /dev/null 2>&1 &'

# 给执行权限
chmod +x dfw
# 将客户端生成的证书testid.pub复制到服务端程序目录
# 在客户端运行以下命令 将本机外网ip添加到服务器防火墙信任列表
./dfw client -host localhost -port 6760 -id testid

./dfw uninstall

# firewall-cmd --permanent --zone=trusted --add-source=60.28.60.xxx
# firewall-cmd --reload
firewall-cmd --permanent --zone=public --remove-service=ssh
firewall-cmd --permanent --zone=public --remove-port=22
firewall-cmd --permanent --zone=public --add-port=6760/tcp
firewall-cmd --permanent --zone=public --add-port=80/tcp
firewall-cmd --permanent --zone=public --add-port=443/tcp
firewall-cmd --reload