1. vi /etc/sysconfig/iptables 를 수행 후 편집
# Firewall configuration written by system-config-securitylevel
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT
-A RH-Firewall-1-INPUT -p 50 -j ACCEPT
-A RH-Firewall-1-INPUT -p 51 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp --dport 1220 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp --dport 5901 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp --dport 5902 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp --dport 5903 -j ACCEPT
ex) 열고 싶은 포트에 대해 위와 같이 써준다.
-A RH-Firewall-1-INPUT -p tcp --dport 8080 -j ACCEPT
"RH-Firewall-1-INPUT Chain에 패킷 종류는 tcp, 포트는 8080을 ACCEPT 시키겠다. (ACCEPT로 jump 시킴)"
2. root에서 iptables 명령을 활용한다.
를 수행하여 방화벽 재시작.