本想做些防火墙策略。防火墙策略都是写在/etc/sysconfig/iptables文件里面的。可我发现我也没有这个文件。
[root@iZ23gx7o02aZ /]# cd /etc/sysconfig/
[root@iZ23gx7o02aZ sysconfig]# ls
atd firstboot irqbalance network-scripts rhn sysstat
auditd grub kdump ntpd rngd sysstat.ioconf
authconfig htcacheclean kernel ntpdate rsyslog system-config-firewall
cbq httpd keyboard prelink sandbox system-config-firewall.old
clock i18n modules quota_nld saslauthd udev
console init netconsole raid-check selinux
cpuspeed ip6tables-config network readahead smartmontools
crond iptables-config networking readonly-root sshd
[root@iZ23gx7o02aZ sysconfig]#
解决办法：
1. 随便写一条iptables命令配置个防火墙规则。如：iptables -P OUTPUT ACCEPT。
[root@iZ23gx7o02aZ /]# cd /etc/sysconfig/
[root@iZ23gx7o02aZ sysconfig]# iptables -P OUTPUT ACCEPT
2. service iptables save进行保存。
[root@iZ23gx7o02aZ sysconfig]# service iptables save
iptables: Saving firewall rules to /etc/sysconfig/iptables:[ OK ]
[root@iZ23gx7o02aZ sysconfig]# ls
atd firstboot iptables-config networking readonly-root sshd
auditd grub irqbalance network-scripts rhn sysstat
authconfig htcacheclean kdump ntpd rngd sysstat.ioconf
cbq httpd kernel ntpdate rsyslog system-config-firewall
clock i18n keyboard prelink sandbox system-config-firewall.old
console init modules quota_nld saslauthd udev
cpuspeed ip6tables-config netconsole raid-check selinux
crond iptables network readahead smartmontools
[root@iZ23gx7o02aZ sysconfig]#
3. service iptables restart命令重启：
[root@iZ23gx7o02aZ sysconfig]# service iptables restart
iptables: Setting chains to policy ACCEPT: filter [ OK ]
iptables: Flushing firewall rules: [ OK ]
iptables: Unloading modules: [ OK ]
iptables: Applying firewall rules: [ OK ]
[root@iZ23gx7o02aZ sysconfig]#
