CENTOS7 Configuration Iptables

CentOS starting from the 7 version of the default is FIREWALLD, this is based on iptables, although there is iptables core, but iptables service is not installed. So just close the FIREWALLD service first, then install the Iptables service.

1. Close Firewall

Systemctl Stop Firewalld.service #停止firewall

Systemctl Disable Firewalld.service #禁止firewall开机启动

2. Install iptables Firewall

Yum install-y iptables-services #安装iptables

Vim/etc/sysconfig/iptables #编辑防火墙配置文件

*filter : INPUT ACCEPT [0:0] : FORWARD ACCEPT [0:0] : OUTPUT ACCEPT [0:0] -A input-m state--state related,established-j ACCEPT -A input-p icmp-j ACCEPT -A input-i lo-j ACCEPT -A input-p tcp-m state--state new-m TCP--dport 22-j ACCEPT -A input-p tcp-m state--state new-m TCP--dport 80-j ACCEPT -A input-j REJECT--reject-with icmp-host-prohibited -A forward-j REJECT--reject-with icmp-host-prohibited COMMIT

Save exit

3. Restart the firewall

Systemctl Restart Iptables.service #最后重启防火墙使配置生效

Systemctl Enable Iptables.service #设置防火墙开机启动

4. Other Related commands

Systemctl Disable Iptables #禁止iptables服务

Systemctl Stop Iptables #暂停服务

Systemctl Enable Iptables #解除禁止iptables

Systemctl start Iptables #开启服务

The service iptables save #因为已经添加iptables服务, so the command can run;

Service Iptables Status #查看iptables服务状态

This article is from the "M April Days" blog, please be sure to keep this source http://msiyuetian.blog.51cto.com/8637744/1888658

CENTOS7 Configuration Iptables