Before starting with the tutorial, make sure you are logged in as a user with sudo privileges.
To disable firewalld on your system follow these steps:
- Type the following command to stop the FirewallD service:
sudo systemctl stop firewalld
- Disable the FirewallD service to start automatically on system boot:
sudo systemctl disable firewalld
- Mask the FirewallD service to prevent it from being started by another services:
sudo systemctl mask --now firewalld
Install and Enable Iptables
Perform the following steps to install Iptables on a CentOS 7 system:
- Run the following command to install the
iptables-servicepackage from the CentOS repositories:
sudo yum install iptables-services
- Once the package is installed start the Iptables service:
sudo systemctl start iptables
sudo systemctl start ip6tables
- Enable the Iptables service to start automatically on system boot:
sudo systemctl enable iptables
sudo systemctl enable ip6tables
- Check the iptables service status with:
sudo systemctl status iptables
sudo systemctl status ip6tables
- To check the current iptables rules use the following commands:
sudo iptables -nvL
sudo ip6tables -nvLBy default only the SSH port 22 is open. The output should look something like this:
Chain INPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 5400 6736K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 2 148 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 3 180 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain OUTPUT (policy ACCEPT 4298 packets, 295K bytes) pkts bytes target prot opt in out source destination
At this point, you have successfully enabled the iptables service and you can start building your firewall. The changes will persist after a reboot.
In this tutorial, you learned how to disable the FirewallD service and install iptables.
If you have any questions or remarks, please leave a comment below.