SUSE linux10sp2 关闭IPV6及防火墙

 

部分一：关闭ipv6

# ip add sh

1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue

    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

    inet 127.0.0.1/8 brd 127.255.255.255 scope host lo

    inet6 ::1/128 scope host

       valid_lft forever preferred_lft forever

2: eth1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000

    link/ether 00:0c:29:7b:80:9b brd ff:ff:ff:ff:ff:ff

    inet 172.24.0.20/24 brd 172.24.0.255 scope global eth1

    inet6 fe80::20c:29ff:fe7b:809b/64 scope link

       valid_lft forever preferred_lft forever

由上面红色的标识可知，当前系统的ipv6已经启用了，那么现在要将ipv6关闭：

# vi /etc/modprobe.conf

将“alias net-pf-10         ipv6”修改为如下：

alias net-pf-10         off

alias ipv6              off

然后重启系统，一定要重启系统才能看到效果。

# ip add sh

1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue

    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

    inet 127.0.0.1/8 brd 127.255.255.255 scope host lo

2: eth1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000

    link/ether 00:0c:29:7b:80:9b brd ff:ff:ff:ff:ff:ff

    inet 172.24.0.20/24 brd 172.24.0.255 scope global eth1

 

部分二：使用命令永久关闭防火墙

（1）首先查看当前防火墙的状态

linux:~ # SuSEfirewall2 status

SuSE系统会默认启用防火墙的，而且防火墙中默认存在很多规则。此时可以用下面命令立即关闭防火墙：

linux:~ # SuSEfirewall2 stop

SuSEfirewall2: Warning: ip6tables does not support state matching. Extended IPv6 support disabled.

SuSEfirewall2: batch committing...

SuSEfirewall2: Firewall rules unloaded.

（2）上面的操作只是确定当前系统已经关闭了防火墙，但不确保系统重启后仍然是关闭防火墙的，所以还要进行下面的操作：

linux:~ # chkconfig --list | grep -i fire

SuSEfirewall2_init        0:off  1:off  2:off  3:off  4:off  5:off  6:off  B:on

SuSEfirewall2_setup       0:off  1:off  2:off  3:on   4:on   5:on   6:off

于是：

linux:~ # chkconfig SuSEfirewall2_setup off

linux:~ # chkconfig --list | grep -i fire

SuSEfirewall2_init        0:off  1:off  2:off  3:off  4:off  5:off  6:off  B:on

SuSEfirewall2_setup       0:off  1:off  2:off  3:off  4:off  5:off  6:off

linux:~ # chkconfig --level B SuSEfirewall2_init off

linux:~ # chkconfig --list | grep -i fire

SuSEfirewall2_init        0:off  1:off  2:off  3:off  4:off  5:off  6:off

SuSEfirewall2_setup       0:off  1:off  2:off  3:off  4:off  5:off  6:off

至此，系统的防火墙完成关闭了。