1、rhel6下关闭防火墙
1.1、rhel6下临时开启关闭防火墙
1.1.1、临时开启防火墙，即时生效，重启后复原
[root@wrx ~]# service iptables start iptables: Applying firewall rules: [ OK ]
1.1.2、临时关闭防火墙，即时生效，重启后复原
[root@wrx ~]# service iptables stop iptables: Setting chains to policy ACCEPT: filter [ OK ] iptables: Flushing firewall rules: [ OK ] iptables: Unloading modules: [ OK ]
1.1.3、查看防火墙状态
[root@wrx ~]# service iptables status Table: filter Chain INPUT (policy ACCEPT) num target prot opt source destination 1 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 2 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 3 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 4 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22 5 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain FORWARD (policy ACCEPT) num target prot opt source destination 1 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain OUTPUT (policy ACCEPT) num target prot opt source destination
1.2、rhel6下永久关闭防火墙
1.2.1、关闭防火墙，永久性生效，重启后不会复原
[root@wrx ~]# chkconfig iptables off [root@wrx ~]# chkconfig --list iptables 0:off 1:off 2:off 3:off 4:off 5:off 6:off ……
1.2.2、开启防火墙，永久性生效，重启后不会复原
[root@wrx ~]# chkconfig iptables on [root@wrx ~]# chkconfig --list auditd 0:off 1:off 2:on 3:on 4:on 5:on 6:off blk-availability 0:off 1:on 2:on 3:on 4:on 5:on 6:off crond 0:off 1:off 2:on 3:on 4:on 5:on 6:off exim 0:off 1:off 2:on 3:on 4:on 5:on 6:off htcacheclean 0:off 1:off 2:off 3:off 4:off 5:off 6:off httpd 0:off 1:off 2:on 3:on 4:on 5:on 6:off ip6tables 0:off 1:off 2:on 3:on 4:on 5:on 6:off iptables 0:off 1:off 2:on 3:on 4:on 5:on 6:off # <----
2、rhel7下关闭防火墙
2.1、rhel7临时开启关闭防火墙
2.1.1、临时开启防火墙，即时生效，重启后复原
[root@wmrx108 ~]# systemctl start firewalld [root@wmrx108 ~]# systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Active: active (running) since 一 2017-07-10 10:16:32 CST; 1min 9s ago Main PID: 857 (firewalld) CGroup: /system.slice/firewalld.service └─857 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid 7月 10 10:16:26 wmrx108.cn systemd[1]: Starting firewalld - dynamic firewall daemon... 7月 10 10:16:32 wmrx108.cn systemd[1]: Started firewalld - dynamic firewall daemon. 7月 10 10:17:33 wmrx108.cn systemd[1]: Started firewalld - dynamic firewall daemon.
2.1.2、临时关闭防火墙，即时生效，重启后复原
[root@wmrx108 ~]# systemctl stop firewalld [root@wmrx108 ~]# systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Active: inactive (dead) since 一 2017-07-10 10:18:27 CST; 2s ago Process: 857 ExecStart=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS (code=exited, status=0/SUCCESS) Main PID: 857 (code=exited, status=0/SUCCESS) 7月 10 10:16:26 wmrx108.cn systemd[1]: Starting firewalld - dynamic firewall daemon... 7月 10 10:16:32 wmrx108.cn systemd[1]: Started firewalld - dynamic firewall daemon. 7月 10 10:17:33 wmrx108.cn systemd[1]: Started firewalld - dynamic firewall daemon. 7月 10 10:18:26 wmrx108.cn systemd[1]: Stopping firewalld - dynamic firewall daemon... 7月 10 10:18:27 wmrx108.cn systemd[1]: Stopped firewalld - dynamic firewall daemon.
2.2.3、查看防火墙状态
[root@wmrx108 ~]# systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Active: inactive (dead) since 一 2017-07-10 10:18:27 CST; 2s ago Process: 857 ExecStart=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS (code=exited, status=0/SUCCESS) Main PID: 857 (code=exited, status=0/SUCCESS) 7月 10 10:16:26 wmrx108.cn systemd[1]: Starting firewalld - dynamic firewall daemon... 7月 10 10:16:32 wmrx108.cn systemd[1]: Started firewalld - dynamic firewall daemon. 7月 10 10:17:33 wmrx108.cn systemd[1]: Started firewalld - dynamic firewall daemon. 7月 10 10:18:26 wmrx108.cn systemd[1]: Stopping firewalld - dynamic firewall daemon... 7月 10 10:18:27 wmrx108.cn systemd[1]: Stopped firewalld - dynamic firewall daemon.
2.2、rhel7永久开启关闭防火墙
2.2.1、永久开启
[root@wmrx108 ~]# systemctl enable firewalld [root@wmrx108 ~]# systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Active: inactive (dead) since 一 2017-07-10 10:18:27 CST; 3min 7s ago Main PID: 857 (code=exited, status=0/SUCCESS) 7月 10 10:16:26 wmrx108.cn systemd[1]: Starting firewalld - dynamic firewall daemon... 7月 10 10:16:32 wmrx108.cn systemd[1]: Started firewalld - dynamic firewall daemon. 7月 10 10:17:33 wmrx108.cn systemd[1]: Started firewalld - dynamic firewall daemon. 7月 10 10:18:26 wmrx108.cn systemd[1]: Stopping firewalld - dynamic firewall daemon... 7月 10 10:18:27 wmrx108.cn systemd[1]: Stopped firewalld - dynamic firewall daemon. [root@wmrx108 ~]# systemctl start firewalld [root@wmrx108 ~]# systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Active: active (running) since 一 2017-07-10 10:22:10 CST; 1s ago Main PID: 2574 (firewalld) CGroup: /system.slice/firewalld.service ├─2574 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid └─2958 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid 7月 10 10:22:09 wmrx108.cn systemd[1]: Starting firewalld - dynamic firewall daemon... 7月 10 10:22:10 wmrx108.cn systemd[1]: Started firewalld - dynamic firewall daemon.
2.2.1、永久关闭
[root@wmrx108 ~]# systemctl disable firewalld Removed symlink /etc/systemd/system/basic.target.wants/firewalld.service. Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.
注：
[root@wmrx108 ~]# systemctl enable firewalld Created symlink from /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service to /usr/lib/systemd/system/firewalld.service. Created symlink from /etc/systemd/system/basic.target.wants/firewalld.service to /usr/lib/systemd/system/firewalld.service. [root@wmrx108 ~]# systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Active: inactive (dead) 7月 10 10:22:12 wmrx108.cn firewalld[2574]: 2017-07-10 10:22:12 ERROR: COMMAND_FAILED: '/sbin/iptables -w2 -w --table filter --delete FORWARD --in-interface virbr0 --out-interface virbr0 --jump ACCEPT' failed: iptables: Bad rule (does a m...st in that chain?). 7月 10 10:22:12 wmrx108.cn firewalld[2574]: 2017-07-10 10:22:12 ERROR: COMMAND_FAILED: '/sbin/iptables -w2 -w --table filter --delete FORWARD --out-interface virbr0 --jump REJECT' failed: iptables: No chain/target/match by that name. 7月 10 10:22:12 wmrx108.cn firewalld[2574]: 2017-07-10 10:22:12 ERROR: COMMAND_FAILED: '/sbin/iptables -w2 -w --table filter --delete FORWARD --in-interface virbr0 --jump REJECT' failed: iptables: No chain/target/match by that name. 7月 10 10:22:12 wmrx108.cn firewalld[2574]: 2017-07-10 10:22:12 ERROR: COMMAND_FAILED: '/sbin/iptables -w2 -w --table filter --delete INPUT --in-interface virbr0 --protocol udp --destination-port 53 --jump ACCEPT' failed: iptables: Bad ru...st in that chain?). 7月 10 10:22:12 wmrx108.cn firewalld[2574]: 2017-07-10 10:22:12 ERROR: COMMAND_FAILED: '/sbin/iptables -w2 -w --table filter --delete INPUT --in-interface virbr0 --protocol tcp --destination-port 53 --jump ACCEPT' failed: iptables: Bad ru...st in that chain?). 7月 10 10:22:12 wmrx108.cn firewalld[2574]: 2017-07-10 10:22:12 ERROR: COMMAND_FAILED: '/sbin/iptables -w2 -w --table filter --delete OUTPUT --out-interface virbr0 --protocol udp --destination-port 68 --jump ACCEPT' failed: iptables: Bad ...st in that chain?). 7月 10 10:22:12 wmrx108.cn firewalld[2574]: 2017-07-10 10:22:12 ERROR: COMMAND_FAILED: '/sbin/iptables -w2 -w --table filter --delete INPUT --in-interface virbr0 --protocol udp --destination-port 67 --jump ACCEPT' failed: iptables: Bad ru...st in that chain?). 7月 10 10:22:12 wmrx108.cn firewalld[2574]: 2017-07-10 10:22:12 ERROR: COMMAND_FAILED: '/sbin/iptables -w2 -w --table filter --delete INPUT --in-interface virbr0 --protocol tcp --destination-port 67 --jump ACCEPT' failed: iptables: Bad ru...st in that chain?). 7月 10 10:24:19 wmrx108.cn systemd[1]: Stopping firewalld - dynamic firewall daemon... 7月 10 10:24:20 wmrx108.cn systemd[1]: Stopped firewalld - dynamic firewall daemon. Hint: Some lines were ellipsized, use -l to show in full. [root@wmrx108 ~]# reboot PolicyKit daemon disconnected from the bus. We are no longer a registered authentication agent. Connection closed by foreign host. Disconnected from remote host(rhel7.2-108) at 10:25:05. Type `help' to learn how to use Xshell prompt. [c:\~]$ Connecting to 192.168.1.108:22... Connection established. To escape to local shell, press 'Ctrl+Alt+]'. Last login: Mon Jul 10 10:17:19 2017 from 192.168.1.100 [root@wmrx108 ~]# systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Active: active (running) since 一 2017-07-10 10:25:49 CST; 51s ago Main PID: 875 (firewalld) CGroup: /system.slice/firewalld.service └─875 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid 7月 10 10:25:44 wmrx108.cn systemd[1]: Starting firewalld - dynamic firewall daemon... 7月 10 10:25:49 wmrx108.cn systemd[1]: Started firewalld - dynamic firewall daemon. [root@wmrx108 ~]# systemctl stop firewalld [root@wmrx108 ~]# systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Active: inactive (dead) since 一 2017-07-10 10:27:14 CST; 1s ago Process: 875 ExecStart=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS (code=exited, status=0/SUCCESS) Main PID: 875 (code=exited, status=0/SUCCESS) 7月 10 10:25:44 wmrx108.cn systemd[1]: Starting firewalld - dynamic firewall daemon... 7月 10 10:25:49 wmrx108.cn systemd[1]: Started firewalld - dynamic firewall daemon. 7月 10 10:27:13 wmrx108.cn systemd[1]: Stopping firewalld - dynamic firewall daemon... 7月 10 10:27:14 wmrx108.cn systemd[1]: Stopped firewalld - dynamic firewall daemon. [root@wmrx108 ~]# systemctl start firewalld [root@wmrx108 ~]# systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Active: active (running) since 一 2017-07-10 10:27:26 CST; 1s ago Main PID: 2315 (firewalld) CGroup: /system.slice/firewalld.service ├─2315 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid └─2721 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid 7月 10 10:27:25 wmrx108.cn systemd[1]: Starting firewalld - dynamic firewall daemon... 7月 10 10:27:26 wmrx108.cn systemd[1]: Started firewalld - dynamic firewall daemon.
[root@wmrx108 ~]# systemctl disable firewalld Removed symlink /etc/systemd/system/basic.target.wants/firewalld.service. Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service. [root@wmrx108 ~]# systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: enabled) Active: active (running) since 一 2017-07-10 10:31:43 CST; 24s ago Main PID: 3269 (firewalld) CGroup: /system.slice/firewalld.service └─3269 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid 7月 10 10:31:45 wmrx108.cn firewalld[3269]: 2017-07-10 10:31:45 ERROR: COMMAND_FAILED: '/sbin/iptables -w2 -w --table filter --delete FORWARD --destination 192.168.122.0/24 --out-interface virbr0 --match conntrack --ctstate ESTABLISHED,RE...st in that chain?). 7月 10 10:31:45 wmrx108.cn firewalld[3269]: 2017-07-10 10:31:45 ERROR: COMMAND_FAILED: '/sbin/iptables -w2 -w --table filter --delete FORWARD --source 192.168.122.0/24 --in-interface virbr0 --jump ACCEPT' failed: iptables: Bad rule (does ...st in that chain?). 7月 10 10:31:45 wmrx108.cn firewalld[3269]: 2017-07-10 10:31:45 ERROR: COMMAND_FAILED: '/sbin/iptables -w2 -w --table filter --delete FORWARD --in-interface virbr0 --out-interface virbr0 --jump ACCEPT' failed: iptables: Bad rule (does a m...st in that chain?). 7月 10 10:31:45 wmrx108.cn firewalld[3269]: 2017-07-10 10:31:45 ERROR: COMMAND_FAILED: '/sbin/iptables -w2 -w --table filter --delete FORWARD --out-interface virbr0 --jump REJECT' failed: iptables: No chain/target/match by that name. 7月 10 10:31:45 wmrx108.cn firewalld[3269]: 2017-07-10 10:31:45 ERROR: COMMAND_FAILED: '/sbin/iptables -w2 -w --table filter --delete FORWARD --in-interface virbr0 --jump REJECT' failed: iptables: No chain/target/match by that name. 7月 10 10:31:45 wmrx108.cn firewalld[3269]: 2017-07-10 10:31:45 ERROR: COMMAND_FAILED: '/sbin/iptables -w2 -w --table filter --delete INPUT --in-interface virbr0 --protocol udp --destination-port 53 --jump ACCEPT' failed: iptables: Bad ru...st in that chain?). 7月 10 10:31:45 wmrx108.cn firewalld[3269]: 2017-07-10 10:31:45 ERROR: COMMAND_FAILED: '/sbin/iptables -w2 -w --table filter --delete INPUT --in-interface virbr0 --protocol tcp --destination-port 53 --jump ACCEPT' failed: iptables: Bad ru...st in that chain?). 7月 10 10:31:45 wmrx108.cn firewalld[3269]: 2017-07-10 10:31:45 ERROR: COMMAND_FAILED: '/sbin/iptables -w2 -w --table filter --delete OUTPUT --out-interface virbr0 --protocol udp --destination-port 68 --jump ACCEPT' failed: iptables: Bad ...st in that chain?). 7月 10 10:31:45 wmrx108.cn firewalld[3269]: 2017-07-10 10:31:45 ERROR: COMMAND_FAILED: '/sbin/iptables -w2 -w --table filter --delete INPUT --in-interface virbr0 --protocol udp --destination-port 67 --jump ACCEPT' failed: iptables: Bad ru...st in that chain?). 7月 10 10:31:45 wmrx108.cn firewalld[3269]: 2017-07-10 10:31:45 ERROR: COMMAND_FAILED: '/sbin/iptables -w2 -w --table filter --delete INPUT --in-interface virbr0 --protocol tcp --destination-port 67 --jump ACCEPT' failed: iptables: Bad ru...st in that chain?). Hint: Some lines were ellipsized, use -l to show in full. [root@wmrx108 ~]# reboot Connection closed by foreign host. Disconnected from remote host(rhel7.2-108) at 10:32:12. Type `help' to learn how to use Xshell prompt. [c:\~]$ Connecting to 192.168.1.108:22... Could not connect to '192.168.1.108' (port 22): Connection failed. Type `help' to learn how to use Xshell prompt. [c:\~]$ Connecting to 192.168.1.108:22... Connection established. To escape to local shell, press 'Ctrl+Alt+]'. Last login: Mon Jul 10 10:26:38 2017 from 192.168.1.100 [root@wmrx108 ~]# systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: enabled) Active: inactive (dead) [root@wmrx108 ~]#
总结：
Linux关闭防火墙命令 rhel6 1） 永久性生效，重启后不会复原 开启：chkconfig iptables on 关闭：chkconfig iptables off 2） 即时生效，重启后复原 开启：service iptables start 关闭：service iptables stop 3）查看防火墙状态 service iptables status Linux关闭防火墙命令 rhel7 1） 永久性生效，重启后不会复原 开启：systemctl enable firewalld 关闭：systemctl disable firewalld 2） 即时生效，重启后复原 开启：systemctl start firewalld 关闭：systemctl stop firewalld 3）查看防火墙状态 systemctl status firewalld