CentOS7关闭防火墙方法
在之前的版本中关闭防火墙等服务的命令是
service iptables stop /etc/init.d/iptables stop
在RHEL7中,其实没有这个服务
[root@rhel7 ~]# cat /etc/redhat-release
Red Hat Enterprise Linux Server release 7.0 (Maipo) [root@rhel7 ~]# service iptables stop
Redirecting to /bin/systemctl stop iptables.service [root@rhel7 ~]# /etc/init.d/iptables stop
-bash: /etc/init.d/iptables: No such file or directory
原来在RHEL7开始,使用systemctl工具来管理服务程序,包括了service和chkconfig
[root@rhel7 ~]# systemctl list-unit-files|grep enabled cups.path enabled abrt-ccpp.service enabled abrt-oops.service enabled abrt-vmcore.service enabled abrt-xorg.service enabled abrtd.service enabled accounts-daemon.service enabled atd.service enabled auditd.service enabled avahi-daemon.service enabled bluetooth.service enabled chronyd.service enabled crond.service enabled cups.service enabled dbus-org.bluez.service enabled
dbus-org.fedoraproject.FirewallD1.service enabled dbus-org.freedesktop.Avahi.service enabled dbus-org.freedesktop.ModemManager1.service enabled dbus-org.freedesktop.NetworkManager.service enabled dbus-org.freedesktop.nm-dispatcher.service enabled display-manager.service enabled dmraid-activation.service enabled firewalld.service enabled firstboot-graphical.service enabled gdm.service enabled getty@.service enabled hypervkvpd.service enabled hypervvssd.service enabled irqbalance.service enabled iscsi.service enabled ksm.service enabled ksmtuned.service enabled libstoragemgmt.service enabled libvirtd.service enabled lvm2-monitor.service enabled mdmonitor.service enabled microcode.service enabled ModemManager.service enabled multipathd.service enabled NetworkManager-dispatcher.service enabled NetworkManager.service enabled nfs-lock.service enabled packagekit-offline-update.service enabled postfix.service enabled rhsmcertd.service enabled rngd.service enabled rpcbind.service enabled rsyslog.service enabled
rtkit-daemon.service enabled smartd.service enabled spice-vdagentd.service enabled sshd.service enabled sysstat.service enabled systemd-readahead-collect.service enabled systemd-readahead-drop.service enabled systemd-readahead-replay.service enabled tuned.service enabled vmtoolsd.service enabled avahi-daemon.socket enabled cups.socket enabled dm-event.socket enabled iscsid.socket enabled iscsiuio.socket enabled lvm2-lvmetad.socket enabled rpcbind.socket enabled default.target enabled graphical.target enabled nfs.target enabled remote-fs.target enabled
禁用防火墙
[root@rhel7 ~]# systemctl stop firewalld.service [root@rhel7 ~]# systemctl disable firewalld.service [root@rhel7 ~]# systemctl status firewalld.service firewalld.service – firewalld – dynamic firewall daemon
Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled) Active: inactive (dead)
Jul 29 22:25:43 rhel7 systemd[1]: Started firewalld – dynamic firewall daemon. Jul 29 22:43:29 rhel7 systemd[1]: Stopping firewalld – dynamic firewall daemon… Jul 29 22:43:29 rhel7 systemd[1]: Stopped firewalld – dynamic firewall daemon. Jul 29 22:44:14 rhel7 systemd[1]: Stopped firewalld – dynamic firewall daemon.