Manage firewall on Centos 7

Check the Firewall Status

To view the current status of the FirewallD service you can use the firewall-cmd command:

sudo firewall-cmd --state

If the FirewallD service is running on your CentOS system the command above will print the following message:

running

Disable Firewall

You can temporarily stop the FirewallD service with the following command:

sudo systemctl stop firewalld

However this change will be valid for the current runtime session only.

To permanently disable the firewall on your CentOS 7 system, follow the steps below:

1. First, stop the FirewallD service with:

   sudo systemctl stop firewalld

2. Disable the FirewallD service to start automatically on system boot:

   sudo systemctl disable firewalld

   The output from the command above will look something like this:

   Removed symlink /etc/systemd/system/multi-user.target.wants/firewalld.service.
   Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.

3. Mask the FirewallD service which will prevent the firewall from being started by other services:

   sudo systemctl mask --now firewalld

   As you can see from the output the mask command simply creates a symlink from the firewalld service to /dev/null:

   Created symlink from /etc/systemd/system/firewalld.service to /dev/null.