在CentOS7中,防火墙iptables被firewalld取代,本文将介绍,如果采用systemctl关闭firewalld,开启iptables。
1、关闭firewalld
systemctl stop firewalld
systemctl disable firewalld
systemctl status firewalld
2、开启iptables
yum install -y iptables-services
systemctl enable iptables
systemctl start iptables
systemctl status iptables
这样,iptables的命令就可以使用了
-bash-4.2# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT icmp -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:http
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:27017
REJECT all -- anywhere anywhere reject-with icmp-host-prohibited
Chain FORWARD (policy ACCEPT)
target prot opt source destination
REJECT all -- anywhere anywhere reject-with icmp-host-prohibited
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
-bash-4.2# service iptables save
iptables: Saving firewall rules to /etc/sysconfig/iptables:[ 确定 ]