http://blog.itpub.net/12707874/viewspace-2141432/
RedHat 7.x 默认不再用iptables管理防火墙,相关命令如下:
一、关闭防火墙
-
查看防火墙状态
systemctl status firewalld -
实时关闭(重启恢复)
systemctl stop firewalld -
查看防火墙服务是否开机启动
systemctl is-enabled firewalld -
永久关闭
systemctl disable firewalld
二、关闭SELinux
-
查看当前SELinux状态
getenforce -
实时关闭(重启恢复)
setenforce 0 -
永久关闭
vim /etc/selinux/config
#This file controls the state of SELinux on the system.
#SELINUX= can take one of these three values:
#enforcing - SELinux security policy is enforced.
#permissive - SELinux prints warnings instead of enforcing.
#disabled - No SELinux policy is loaded.
SELINUX=permissive #修改为disabled
#SELINUXTYPE= can take one of three two values:
#targeted - Targeted processes are protected,
#minimum - Modification of targeted policy. Only selected processes are protected.
#mls - Multi Level Security protection.
SELINUXTYPE=targeted
1、在之前的版本中关闭防火墙等服务的命令是
service iptables stop
/etc/init.d/iptables stop
2、RHEL7开始,使用systemctl工具来管理服务程序,包括了service和chkconfig
systemctl list-unit-files|grep enabled
查看防火墙状态。
systemctl status firewalld
临时关闭防火墙命令。重启电脑后,防火墙自动起来。
systemctl stop firewalld
永久关闭防火墙命令。重启后,防火墙不会自动启动。
systemctl disable firewalld
打开防火墙命令。
systemctl enable firewalld