// 查看 firewalld

[root@itnetcn sysconfig]# systemctl status firewalld.service

firewalld.service - firewalld - dynamic firewall daemon

   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled)

   Active: active (running) since 四 2015-07-02 15:19:05 CST; 1 day 10h ago

 Main PID: 901 (firewalld)

   CGroup: /system.slice/firewalld.service

           └─901 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid

7月 02 15:19:04 itnetcn systemd[1]: Starting firewalld - dynamic firewall .....

7月 02 15:19:05 itnetcn systemd[1]: Started firewalld - dynamic firewall d...n.

Hint: Some lines were ellipsized, use -l to show in full.

[root@itnetcn sysconfig]# 

// 关闭 firewalld

[root@itnetcn sysconfig]# systemctl stop firewalld.service

[root@itnetcn sysconfig]# systemctl status firewalld.service

firewalld.service - firewalld - dynamic firewall daemon

   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled)

   Active: inactive (dead) since 六 2015-07-04 01:29:24 CST; 2s ago

 Main PID: 901 (code=exited, status=0/SUCCESS)

7月 02 15:19:04 itnetcn systemd[1]: Starting firewalld - dynamic firewall .....

7月 02 15:19:05 itnetcn systemd[1]: Started firewalld - dynamic firewall d...n.

7月 04 01:29:23 itnetcn systemd[1]: Stopping firewalld - dynamic firewall .....

7月 04 01:29:24 itnetcn systemd[1]: Stopped firewalld - dynamic firewall d...n.

Hint: Some lines were ellipsized, use -l to show in full.

[root@itnetcn sysconfig]#

// 禁止开机启动 firewalld

[root@itnetcn sysconfig]# systemctl disable firewalld.service

rm '/etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service'

rm '/etc/systemd/system/basic.target.wants/firewalld.service'

[root@itnetcn sysconfig]# systemctl status firewalld.service

firewalld.service - firewalld - dynamic firewall daemon

   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled)

   Active: inactive (dead)

7月 02 15:19:04 itnetcn systemd[1]: Starting firewalld - dynamic firewall .....

7月 02 15:19:05 itnetcn systemd[1]: Started firewalld - dynamic firewall d...n.

7月 04 01:29:23 itnetcn systemd[1]: Stopping firewalld - dynamic firewall .....

7月 04 01:29:24 itnetcn systemd[1]: Stopped firewalld - dynamic firewall d...n.

Hint: Some lines were ellipsized, use -l to show in full.

[root@itnetcn sysconfig]# 

// 安装 iptables

[root@itnetcn sysconfig]# yum install iptables-services

已加载插件：fastestmirror, langpacks

Repository base is listed more than once in the configuration

Repository updates is listed more than once in the configuration

Repository extras is listed more than once in the configuration

Repository centosplus is listed more than once in the configuration

Repository base is listed more than once in the configuration

Repository updates is listed more than once in the configuration

Repository extras is listed more than once in the configuration

Repository centosplus is listed more than once in the configuration

Loading mirror speeds from cached hostfile

正在解决依赖关系

--> 正在检查事务

---> 软件包 iptables-services.x86_64.0.1.4.21-13.el7 将被 安装

--> 解决依赖关系完成

// 配置 iptables

[root@itnetcn sysconfig]# vi /etc/sysconfig/iptables

[root@itnetcn sysconfig]# 

# allowed ssh

-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT

// 重启防火墙

[root@itnetcn sysconfig]# service iptables restart

Redirecting to /bin/systemctl restart  iptables.service

[root@itnetcn sysconfig]# systemctl restart iptables.service

[root@itnetcn sysconfig]#