关闭firewall

# systemctl stop firewalld.service  //停止firewall
# systemctl disable firewalld.service //禁止firewall开机启动

编辑防火墙配置文件

# vi /etc/sysconfig/iptables
 Firewall configuration written by system-config-firewall
 Manual customization of this file is not recommended.
 *filter
 :INPUT ACCEPT [0:0]
 :FORWARD ACCEPT [0:0]
 :OUTPUT ACCEPT [0:0]
 -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
 -A INPUT -p icmp -j ACCEPT
 -A INPUT -i lo -j ACCEPT
 -A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
 -A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
 -A INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT
 -A INPUT -m state --state NEW -m tcp -p tcp --dport 3306 -j ACCEPT
 -A INPUT -m state --state NEW -m tcp -p tcp --dport 401:409 -j ACCEPT
 -A INPUT -m state --state NEW -m tcp -p tcp --dport 800:999 -j ACCEPT
 -A INPUT -m state --state NEW -m tcp -p tcp --dport 8000:8999 -j ACCEPT
 -A INPUT -j REJECT --reject-with icmp-host-prohibited
 -A FORWARD -j REJECT --reject-with icmp-host-prohibited
 COMMIT
 :x #保存退出

iptables相关的命令

# systemctl restart iptables.service //最后重启防火墙使配置生效
# systemctl enable iptables.service  //设置防火墙开机启动

关闭SELINUX

# vi /etc/selinux/config
 SELINUX=enforcing //注释掉
 SELINUXTYPE=targeted //注释掉
 SELINUX=disabled //增加
 :x! //保存退出
 setenforce 0 //使配置立即生效