CentOS7将firewalld换成iptables

CentOS7中用firewalld替代了iptables，默认情况下iptables是没有安装的，如果习惯使用iptables可以将firewalld关掉换成iptables。

1.首先关闭firewalld服务

systemctl stop firewalld
systemctl mask firewalld
systemctl disable firewalld

2.安装iptables

yum -y install iptables

3.配置iptables规则

# Generated by iptables-save v1.4.21 on Thu Sep 10 02:27:20 2015
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -s 127.0.0.1/32 -d 127.0.0.1/32 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 21 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 20 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 8080 -j ACCEPT
-A INPUT -p udp -m udp --dport 161 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-port-unreachable
-A FORWARD -j REJECT --reject-with icmp-port-unreachable
-A OUTPUT -j ACCEPT
COMMIT
# Completed on Thu Sep 10 02:27:20 2015

3.开启iptables服务

systemctl enable iptables
systemctl start iptables

4.保存

service iptables save
service iptables restart

5.开机启动

chkconfig iptables on