VI/etc/sysconfig/iptables
-A input-M State-State new-m tcp-p tcp-dport 80-J accept (allow port 80 to pass the firewall)
-A input-M State-State new-m tcp-p tcp-dport 3306-J accept (allow port 3306 to pass the firewall)
Note:Many users add these two rules to the last line of the firewall configuration, resulting in firewall startup failure. The correct rule should be added to the default port 22.
The firewall rules are as follows:
######################################
# Firewall configuration written by system-config-Firewall
# Manual customization of this file is not recommended.
* Filter
: Input accept [0: 0]
: Forward accept [0: 0]
: Output accept [0: 0]
-A input-M State-State established, related-J accept
-A input-p icmp-J accept
-A input-I lo-J accept
-A input-M State-State new-m tcp-p tcp-dport 22-J accept
-A input-M State-State new-m tcp-p tcp-dport 80-J accept
-A input-M State-State new-m tcp-p tcp-dport 3306-J accept
-A input-J reject-with ICMP-host-prohibited
-A forward-J reject-with ICMP-host-prohibited
Commit
#####################################
/Etc/init. d/iptables restart # restart the firewall to make the configuration take effect.