centos 7.x 防火墙

centos 7.x 的防火墙不再是iptables了,而是firewall

直接关闭防火墙

systemctl stop firewalld #停止firewall

systemctl disablefirewalld.service #禁止firewall开机启动

------------------------------------------------------- 

systemctl startfirewalld #启动firewall

开放3306、80等常用端口

firewall-cmd --permanent--add-port=3306/tcp

firewall-cmd --permanent--add-port=3306/udp

firewall-cmd --permanent --add-port=80/tcp

firewall-cmd --permanent --add-port=80/udp

重启防火墙

systemctl restart firewalld #重启firewall