Linux配置防火墙开启80端口、3306端口的方法(linux的防火墙配置文件)

编辑：rootadmin

vi /etc/sysconfig/iptables -A INPUT -m state –state NEW -m tcp -p tcp –dport -j ACCEPT（允许端口通过防火墙） -A INPUT -m state –state NEW -m tcp -p tcp –dport -j ACCEPT（允许端口通过防火墙）特别提示：很多网友把这两条规则添加到防火墙配置的最后一行，导致防火墙启动失败，正确的应该是添加到默认的端口这条规则的下面添加好之后防火墙规则如下所示：复制代码代码如下: # Firewall configuration written by system-config-firewall # Manual customization of this file is not recommended. *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -m state –state ESTABLISHED,RELATED -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -m state –state NEW -m tcp -p tcp –dport -j ACCEPT -A INPUT -m state –state NEW -m tcp -p tcp –dport -j ACCEPT -A INPUT -m state –state NEW -m tcp -p tcp –dport -j ACCEPT -A INPUT -j REJECT –reject-with icmp-host-prohibited -A FORWARD -j REJECT –reject-with icmp-host-prohibited COMMIT /etc/init.d/iptables restart #最后重启防火墙使配置生效

推荐整理分享Linux配置防火墙开启80端口、3306端口的方法(linux的防火墙配置文件)，希望有所帮助，仅作参考，欢迎阅读内容。