centos 7 下 firewalld关闭 、selinux关闭、iptables规则

# 关闭 firewalld

ps -ef | grep firewalld    「 默认开启」 

root      3844     1  0 Jun30 ?        00:00:02 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid

systemctl stop firewalld    「 stop & start & restart & status 」 

systemctl disable firewalld.service    「 禁止开机启动 & enable」 

 

# 关闭 selinux

vim /etc/selinux/config

• SELINUX=disabled
• #SELINUXTYPE=targeted

# iptables 未安装

service iptables status    「 service name 状态」 

Redirecting to /bin/systemctl status iptables.service

* iptables.service - IPv4 firewall with iptables

   Loaded: loaded (/usr/lib/systemd/system/iptables.service; disabled; vendor preset: disabled)

   Active: inactive (dead)

 

# iptables 安装

yum -y install iptables-services

systemctl start iptables.service    「 systemctl start iptables 」   

systemctl stop iptables.service        「 systemctl stop iptables 」  

systemctl status iptables.service    「 systemctl status iptables 」 

访问 http://10.211.55.12    「 OK 」

systemctl start iptables    

访问 http://10.211.55.12    「 error 」

 

# iptables 备份

cd /etc/sysconfig/

cp iptables iptables.bak

 

# 开放80端口

iptables -I INPUT -p tcp --dport 80 -m state --state NEW -j ACCEPT

iptables -L -n    「 查看生效」 

访问 http://10.211.55.12    「 OK 」

iptables-save > /etc/sysconfig/iptables    「 保存添加的规则 」