AWS RHEL7 virbr0 and firewalld iptables

最新推荐文章于 2023-11-20 23:19:05 发布

原创最新推荐文章于 2023-11-20 23:19:05 发布 · 1k 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#aws #rhel7 #http #firewall #iptables

Linux 专栏收录该内容

91 篇文章

订阅专栏

本文记录了解决RHEL7在AWS上遇到的FTP和HTTP服务无法正常工作的问题过程。作者通过排查服务状态、本地连接、安全组配置等问题，最终发现是由于firewalld阻止了必要的端口导致服务不可访问，并给出了相应的解决办法。

I reboot the RHEL7 on the AWS, the ftp and httpd was not working, ftp cannot connect and http://54.169.139.195/ website cannot open, was checking where the problem was,

1, checked the ftp and httpd service is up and running.. all are working fine.
service httpd status
service vsftpd status
netstat -ntulp | grep httpd
netstat -ntulp | grep ftpd

2, checking the local connection, working fine.
elinks 127.0.0.1

3, checking the EC2 security groups configuration, the port 80 and port 21 are all allowed.

4, found "virbr0" is up by "ifconfig" command, removed the virbr0 interface by reference to this link http://website-humblec.rhcloud.com/how-to-removedelete-virbr0/.
virsh net-destroy default

5, finally found the reason, the firewalld was up and running, not sure when I started this service..
firewall-cmd --add-service=ftp --permanent
firewall-cmd --add-service=http --permanent
firewall-cmd --reload

or the simplest way to do this is as below, as the AWS has the firewall running already...
iptables flush

Reference link:
http://website-humblec.rhcloud.com/how-to-removedelete-virbr0/
http://www.thegeekstuff.com/2011/01/redhat-iptables-flush/
http://www.tecmint.com/configure-firewalld-in-centos-7/3/
https://progeeking.com/2015/09/26/oelrhel-7-firewalld/
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Migration_Planning_Guide/sect-Red_Hat_Enterprise_Linux-Migration_Planning_Guide-Security_and_Access_Control.html