mariadb与firewall

主机上windows/linux，虚拟机上cenos7。
虚拟机上安装mariadb10，主机链接虚拟机的mysql失败。
x@x ~ $ mysql -h 192.168.2.1 -u "username" -p
ERROR 2003 (HY000): Can't connect to MySQL server on '192.168.2.1' (113 "No route to host")
查找后发现是虚拟机上的防火墙造成的。
1. 虚拟机上使用iptables -F，清空所选链。这等于把所有规则一个个的删除。
2. 关闭firewalld.service服务
   [r@s ~]# systemctl stop firewalld
3. 修改firewalld的配置文件，允许mysql/mariadb服务，/etc/firewalld/zones/public.xml
<?xml version="1.0" encoding="utf-8"?>
<zone>
  <short>Public</short>
  <description>For use in public areas. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
  <service name="dhcpv6-client"/>
  <service name="ssh"/>
  <service name="mysql"/>
  <service name="mariadb"/>
</zone>

记得重启firewalld，systemctl restart firewalld