1，关闭并停掉firewall [[email protected] ~]# systemctl stop firewalld.service [[email protected] ~]# systemctl disable firewalld.service 2，安装iptables [[email protected] ~]# yum install iptables-services [[email protected] ~]# systemctl enable iptables.service [[email protected] ~]# systemctl restart firewalld.service [[email protected] ~]# cat /etc/sysconfig/iptables # sample configuration for iptables service # you can edit this manually or use system-config-firewall # please do not ask us to add additional ports/services to this default configuration *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT #允许 -A INPUT -p tcp -m state --state NEW -m tcp --dport 23 -j ACCEPT -A INPUT -p udp -m state --state NEW -m udp --dport 6970 -j DROP #禁止 -A INPUT -p udp -m state --state NEW -m udp --dport 6971 -j DROP #-A INPUT -j REJECT --reject-with icmp-host-prohibited #-A FORWARD -j REJECT --reject-with icmp-host-prohibited COMMIT [[email protected] ~]# 3，关闭selinux [[email protected] ~]# setenforce 0 #使配置立即生效 [[email protected] ~]# vim /etc/selinux/config #SELINUX=enforcing #注释掉 #SELINUXTYPE=targeted #注释掉 SELINUX=disabled #增加
时间： 2024-10-06 06:49:21