Centos7 禁止firewalld并使用iptables 作默认防火墙

时间:2023-03-09 03:15:59
Centos7 禁止firewalld并使用iptables 作默认防火墙

一、停止并禁用firewalld

[root@test ~]# systemctl stop firewalld
[root@test ~]# systemctl disable firewalld
Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.
Removed symlink /etc/systemd/system/basic.target.wants/firewalld.service.

二、查看iptables 列表,并安装service 软件

[root@test ~]# yum list all iptables*
已加载插件:fastestmirror
Loading mirror speeds from cached hostfile
* base: mirrors.neusoft.edu.cn
* extras: mirrors.tuna.tsinghua.edu.cn
* updates: mirrors.sina.cn
已安装的软件包
iptables.x86_64 1.4.-.el7 @base
可安装的软件包
iptables.i686 1.4.-.el7 base
iptables-devel.i686 1.4.-.el7 base
iptables-devel.x86_64 1.4.-.el7 base
iptables-services.x86_64 1.4.-.el7 base
iptables-utils.x86_64 1.4.-.el7 base

安装service

[root@test ~]# yum install iptablesyum install iptables-services.x86_64 -y

三、启动iptables服务,并检查状态

[root@test ~]# systemctl start iptables
[root@test ~]# systemctl status iptables
● iptables.service - IPv4 firewall with iptables
Loaded: loaded (/usr/lib/systemd/system/iptables.service; disabled; vendor preset: disabled)
Active: active (exited) since 五 -- :: CST; 9s ago
Process: ExecStart=/usr/libexec/iptables/iptables.init start (code=exited, status=/SUCCESS)
Main PID: (code=exited, status=/SUCCESS) 8月 :: test systemd[]: Starting IPv4 firewall with iptables...
8月 :: test iptables.init[]: iptables: Applying firewall rules: [ OK ]
8月 :: test systemd[]: Started IPv4 firewall with iptables.

四、加入开机自启动

[root@test ~]# systemctl enable iptables
Created symlink from /etc/systemd/system/basic.target.wants/iptables.service to /usr/lib/systemd/system/iptables.service.