#关闭自带 firewall

systemctl stop firewalld

systemctl mask firewalld

#显示当前 firewall状态(mask即成功)
systemctl status firewalld

#安装 iptables
yum install iptables-services

#添加入开机自启
systemctl enable iptables

#开放端口（根据自己需求删减）
iptables -A INPUT -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -p tcp --dport 443 -j ACCEPT
iptables -A INPUT -p tcp --dport 3306 -j ACCEPT
iptables -A INPUT -p tcp --dport 8080 -j ACCEPT

#保存防火墙配置
service iptables save

#启动 iptables
systemctl start iptables

#显示当前 iptables 状态
systemctl status iptables.servic

#关闭 iptables

systemctl mask iptables

systemctl stop iptables


#切换到 firewalld

systemctl unmask friewalld

systemctl start friewalld

service iptables save
systemctl start iptables
systemctl status iptables.servic