CentOS 7.0默认使用的是firewall作为防火墙@H_404_3@

@H_404_3@

@H_404_3@

1、关闭firewall：@H_404_3@

@H_404_3@

systemctl stop firewalld.service#停止firewall@H_404_3@

systemctl disable firewalld.service#禁止firewall开机启动@H_404_3@

2、安装iptables防火墙@H_404_3@

@H_404_3@

yum install iptables-services#安装
@H_404_3@

@H_404_3@

编辑防火墙配置文件打开指定的端口号使用udp协议打开52100端口：
@H_404_3@

@H_404_3@

vi/etc/sysconfig/iptables
@H_404_3@

@H_404_3@

# Firewall configuration written by system-config-firewall@H_404_3@

# Manual customization of this file is not recommended.@H_404_3@

*filter@H_404_3@

:INPUT ACCEPT [0:0]@H_404_3@

:FORWARD ACCEPT [0:0]@H_404_3@

:OUTPUT ACCEPT [0:0]@H_404_3@

-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT@H_404_3@

-A INPUT -p icmp -j ACCEPT@H_404_3@

-A INPUT -i lo -j ACCEPT@H_404_3@

-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT@H_404_3@

-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT@H_404_3@

-A INPUT -m state --state NEW -m tcp -p tcp --dport 3306 -j ACCEPT@H_404_3@

-A INPUT -j REJECT --reject-with icmp-host-prohibited@H_404_3@

-A FORWARD -j REJECT --reject-with icmp-host-prohibited@H_404_3@

COMMIT@H_404_3@

:wq!#保存退出@H_404_3@

systemctl restart iptables.service#最后重启防火墙使配置生效@H_404_3@

systemctl enable iptables.service#设置防火墙开机启动@H_404_3@