centos Disable Firewall In CentOS

[100%]

Firewalld is installed and enabled by default, on my CentOS 7 minimal system we can confirm this as shown below.

This is the hidden content, please

• Sign In
• or
• Sign Up

 

Being enabled means that the service will start automatically during system boot. We can see here that firewalld is both active and enabled. We can disable it as shown below.

This is the hidden content, please

• Sign In
• or
• Sign Up

Now that firewalld is disabled, it will not automatically start on system boot. This does not however stop the current running instance of firewalld, as we can see below it still has a status of active meaning that firewalld is currently running.

This is the hidden content, please

• Sign In
• or
• Sign Up

To stop firewalld from running, we must stop it separately, as shown below.

This is the hidden content, please

• Sign In
• or
• Sign Up

Now if we query whether firewalld is running and enabled, we should see that it has been disabled.

This is the hidden content, please

• Sign In
• or
• Sign Up

Despite being disabled, it is still currently possible for the firewalld service to be started manually with the ‘systemctl start firewalld’ command. To completely prevent it from being manually started the service must be masked.

This is the hidden content, please

• Sign In
• or
• Sign Up

Now even if we try to manually start firewalld it will fail.

This is the hidden content, please

• Sign In
• or
• Sign Up

Failed to start firewalld.service: Unit firewalld.service is masked.

Disable Iptables In CentOS 7

As mentioned by default firewalld is in use in CentOS 7, however it is possible that firewalld may have been removed and the traditional iptables has been installed instead. If this is the case, the same commands will be used, except we will specify iptables in the instance of firewalld.

This is the hidden content, please

• Sign In
• or
• Sign Up

It’s worth noting that iptables and firewalld are mutually exclusive, only one should be running at any one time. Therefore, even if we do wish to use either firewalld or iptables we should ensure that the opposite service is completely stopped, disabled, and masked so that it will not interfere.