CentOS7 禁用firewall防火墙 启用iptables 步骤

Posted 2020-10-04 西北野狼

一、题目：CentOS7 禁用firewall防火墙 启用iptables 步骤

二、要求：CentOS7 的防火墙默认是firewall 防火墙，现在需要启用iptables防火墙并完成常用的配置。

三、步骤：

1. 关闭firewall

1 systemctl stop firewalld.service  # 停止firewall
2 systemctl disable firewalld.service # 禁止firewall 开机启动
3 systemctl status firewalld.service # firewall 服务启动状态

2. 安装iptables并配置

1 yum install iptables-services # 安装iptables服务

[root@localhost ~]# vi /etc/sysconfig/iptables # 修改iptables配置文件

# sample configuration for iptables service
# you can edit this manually or use system-config-firewall
# please do not ask us to add additional ports/services to this default configuration
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT 
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT   
-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT  # 增加一些端口规范
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT

3. 重启服务并设置为开启启动

1 systemctl restart iptables.service # 最后重启使配置生效
2 systemctl enable iptables.service # 设置防火墙开启启动

四、参考文献

1 http://www.linuxidc.com/Linux/2015-05/117473.htm # 配置说明
2 http://www.linuxidc.com/Linux/2014-03/99159.htm # 使用规范说明