1，关闭并停掉firewall [root@localhost ~]# systemctl stop firewalld.service [root@localhost ~]# systemctl disable firewalld.service 2，安装iptables [root@localhost ~]# yum install iptables-services [root@localhost ~]# systemctl enable iptables.service [root@localhost ~]# systemctl restart firewalld.service [root@localhost ~]# cat /etc/sysconfig/iptables # sample configuration for iptables service # you can edit this manually or use system-config-firewall # please do not ask us to add additional ports/services to this default configuration *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT #允许 -A INPUT -p tcp -m state --state NEW -m tcp --dport 23 -j ACCEPT -A INPUT -p udp -m state --state NEW -m udp --dport 6970 -j DROP #禁止 -A INPUT -p udp -m state --state NEW -m udp --dport 6971 -j DROP #-A INPUT -j REJECT --reject-with icmp-host-prohibited #-A FORWARD -j REJECT --reject-with icmp-host-prohibited COMMIT [root@localhost ~]# 3，关闭selinux [root@localhost ~]# setenforce 0 #使配置立即生效 [root@localhost ~]# vim /etc/selinux/config #SELINUX=enforcing #注释掉 #SELINUXTYPE=targeted #注释掉 SELINUX=disabled #增加
本文出自 “李春利” 博客，请务必保留此出处http://990487026.blog.51cto.com/10133282/1952697
原文地址：http://990487026.blog.51cto.com/10133282/1952697
