1.進(jìn)入到/etc/sysconfig 如圖

2.使用vi命令對(duì)iptables進(jìn)行編輯."vi iptables"，然后顯示如圖

# Firewall configuration written by system-config-firewall # Manual customization of this file is not recommended. *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT -A INPUT -j REJECT --reject-with icmp-host-prohibited -A FORWARD -j REJECT --reject-with icmp-host-prohibited COMMIT

3.新增mysql的端口3306，這里我們需要注意這行命令

-A INPUT -j REJECT --reject-with icmp-host-prohibited，這行已拒絕其他端口的命令，如果我們將新插入的
開(kāi)放端口在放在這行命令之后的情況下，后面的配置開(kāi)放的端口是不會(huì)被啟用的。
# Firewall configuration written by system-config-firewall # Manual customization of this file is not recommended. *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 3306 -j ACCEPT -A INPUT -j REJECT --reject-with icmp-host-prohibited -A FORWARD -j REJECT --reject-with icmp-host-prohibited COMMIT

4.然后調(diào)用service iptables resatar 命令
，顯示如圖代表成功。

[root@instance-9j07wgiz sysconfig]# service iptables restart iptables: Setting chains to policy ACCEPT: filter [ OK ] iptables: Flushing firewall rules: [ OK ] iptables: Unloading modules: [ OK ] iptables: Applying firewall rules: [ OK ]

?

轉(zhuǎn)載于:https://www.cnblogs.com/djrLog/p/5519409.html

總結(jié)

以上是生活随笔為你收集整理的linux 防火墙配置与REJECT导致没有生效问题的全部?jī)?nèi)容，希望文章能夠幫你解決所遇到的問(wèn)題。

如果覺(jué)得生活随笔網(wǎng)站內(nèi)容還不錯(cuò)，歡迎將生活随笔推薦給好友。