【rocky linux】firewalld切换到iptables 以及Failed to start IPv4 firewall with iptables.

 

关闭【firewalld】，安装iptables并启动

#关闭自带 firewall
systemctl stop firewalld
systemctl mask firewalld

#显示当前 firewall状态(mask即成功)
systemctl status firewalld

#安装 iptables
yum install iptables-services

#添加入开机自启
systemctl enable iptables

#开放端口（根据自己需求删减）
iptables -A INPUT -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -p tcp --dport 443 -j ACCEPT
iptables -A INPUT -p tcp --dport 3306 -j ACCEPT
iptables -A INPUT -p tcp --dport 8080 -j ACCEPT

#保存防火墙配置
service iptables save

#启动 iptables
systemctl start iptables

#显示当前 iptables 状态
systemctl status iptables.servic

 

还原方法：

#关闭 iptables
systemctl mask iptables
systemctl stop iptables

#切换到 firewalld
systemctl unmask friewalld
systemctl start friewalld

 

 

dlc1: Failed to start IPv4 firewall with iptables.

可能是没保存配置，执行以下指令

service iptables save
systemctl start iptables
systemctl status iptables.servic