CentOS7에서 iptables 사용

CentOS7에서는 기본 방화벽은 Firewalld를 사용합니다. 이전 6버전에 사용했던 iptables를 이용하기 위해서는 Firewalld를 내리고 시작해야 합니다.

 

1) Firewalld 현재 상태 확인

# firewall-cmd --state
running

 

2) Firewalld 중지

# systemctl stop firewalld
# systemctl mask firewalld
Created symlink from /etc/systemd/system/firewalld.service to /dev/null.
# firewall-cmd –state
not running

 

3) iptables 설치

# yum install iptables-services

# systemctl enable iptables
# systemctl start iptables
# iptables -nL
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all — 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
ACCEPT icmp — 0.0.0.0/0 0.0.0.0/0
ACCEPT all — 0.0.0.0/0 0.0.0.0/0
ACCEPT tcp — 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22
REJECT all — 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain FORWARD (policy ACCEPT)
target prot opt source destination
REJECT all — 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain OUTPUT (policy ACCEPT)
target prot opt source destination