linux 关闭、开启防火墙

最新推荐文章于 2025-01-15 11:39:35 发布

原创最新推荐文章于 2025-01-15 11:39:35 发布 · 394 阅读

0 ·

CC 4.0 BY-SA版权

Linux 专栏收录该内容

17 篇文章

订阅专栏

本文详细介绍了iptables防火墙的基本操作，包括安装、查看状态、临时关闭与开启、以及设置开机启动状态的方法。通过具体实例展示了如何管理Linux系统的网络流量。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

1、安装iptables（如果没有，有直接操作命令）
[root@linux1 html]# yum install iptables

2、查看状态

[root@linux1 html]# service iptables status
Table: filter
Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination
1    ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
2    ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0
3    ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
4    ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:22
5    REJECT     all  --  0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited

Chain FORWARD (policy ACCEPT)
num  target     prot opt source               destination
1    REJECT     all  --  0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination

3、关闭防火墙（临时关闭）

[root@linux1 html]# service iptables stop
iptables: Setting chains to policy ACCEPT: filter          [  OK  ]
iptables: Flushing firewall rules:                         [  OK  ]
iptables: Unloading modules:                               [  OK  ]

3、查看防火墙

[root@linux1 html]# service iptables status
iptables: Firewall is not running.

4、开机关闭防火墙
[root@linux1 html]# chkconfig iptables off

5、 开启防火墙（临时开启）
[root@linux1 html]# service iptables start
iptables: Applying firewall rules:                         [  OK  ]

6、查看状态
[root@linux1 html]# service iptables status
Table: filter
Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination
1    ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
2    ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0
3    ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
4    ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:22
5    REJECT     all  --  0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited

Chain FORWARD (policy ACCEPT)
num  target     prot opt source               destination
1    REJECT     all  --  0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination

7、 开机开启防火墙
[root@linux1 html]# chkconfig iptables on