|
|
开放80、22、3306端口操作iptables -I INPUT -p tcp --dport 80 -j ACCEPT
9 j5 {( O% S1 ]7 N7 X& hiptables -I INPUT -p tcp --dport 22 -j ACCEPT* w! z+ a, ^' W0 g. c
iptables -I INPUT -p tcp --dport 3306 -j ACCEPT1 K7 O' _6 k* a) X1 Z3 [
然后保存:
( f) ?6 _5 _8 L/etc/rc.d/init.d/iptables save2 `. ]1 O0 K6 n1 R: l! S. F' m/ C4 z
6 b! u9 C; h- X: d* ]查看打开的端口:" G; _+ @+ ~: j' G2 d* |
/etc/init.d/iptables status9 |7 ~9 V9 W9 }9 _) }8 J
- _& Y3 V a- B, a' y7 d-------------------------------------------------------
! I o6 P/ y2 u& {/ e补充说明:, O% l, ?$ @0 B2 p
# U' E9 j5 W! o$ _* S
#关闭防火墙0 t7 q6 q4 ?) _9 h0 z& n' c1 E& C
/etc/init.d/iptables stop% A& A; y" v, _+ A1 ]% k0 @5 D
service iptables stop # 停止服务
3 c( C1 Y8 f. b' b3 L#查看防火墙信息
. Q* i8 A" z+ r j) j) o6 {, d! F6 E! j2 U/etc/init.d/iptables status
' t$ {' n/ M2 o2 I
( i S/ Z$ l' G: W1 Q6 B7 d#开放端口:80804 E( J+ K% e; `2 O4 V9 A
/sbin/iptables -I INPUT -p tcp --dport 8080 -j ACCEPT% T: ^, h' u6 `
#重启防火墙以便改动生效或者直接重启系统)
; C; W8 k' |- e& ]: ?/etc/init.d/iptables restart
( l$ u3 G$ q7 W6 ~: H#将更改进行保存, {" B' \7 L+ G* B
/etc/rc.d/init.d/iptables save" A- f/ Z( m( N$ Q0 v9 D7 \
- k* N0 s( n. }% A; _
另外直接在/etc/sysconfig/iptables中增加一行:
, x" @. h6 r# E. n5 i-A RH-Firewall-1-INPUT -m state –state NEW -m tcp -p tcp –dport 8080 -j ACCEPT
" ]0 o- C+ \# {2 L: b- ~#永久关闭防火墙+ {* |( P- ]7 R: l$ G0 C
chkconfig –level 35 iptables off
- _ Z8 E, `, c! J" l% w1 p
- ]7 m4 v0 @5 k+ H+ ~ |
|