部分一:關閉ipv6
# ip add sh
1: lo:
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth1:
link/ether 00:0c:29:7b:80:9b brd ff:ff:ff:ff:ff:ff
inet 172.24.0.20/24 brd 172.24.0.255 scope global eth1
inet6 fe80::20c:29ff:fe7b:809b/64 scope link
valid_lft forever preferred_lft forever
由上面的標識可知,當前系統(tǒng)的ipv6已經(jīng)啟用了,那么現(xiàn)在要將ipv6關閉:
# vi /etc/modprobe.conf
將“alias net-pf-10 ipv6”修改為如下:
alias net-pf-10 off
alias ipv6 off
然后重啟系統(tǒng),一定要重啟系統(tǒng)才能看到效果。
# ip add sh
1: lo:
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
2: eth1:
link/ether 00:0c:29:7b:80:9b brd ff:ff:ff:ff:ff:ff
inet 172.24.0.20/24 brd 172.24.0.255 scope global eth1
部分二:使用命令永久關閉防火墻
(1)首先查看當前防火墻的狀態(tài)
linux:~ # SUSEfirewall2 status
SUSE系統(tǒng)會默認啟用防火墻的,而且防火墻中默認存在很多規(guī)則。此時可以用下面命令立即關閉防火墻:
linux:~ # SUSEfirewall2 stop
SUSEfirewall2: Warning: ip6tables does not support state matching. Extended IPv6 support disabled.
SUSEfirewall2: batch committing...
SUSEfirewall2: Firewall rules unloaded.
(2)上面的操作只是確定當前系統(tǒng)已經(jīng)關閉了防火墻,但不確保系統(tǒng)重啟后仍然是關閉防火墻的,所以還要進行下面的操作:
linux:~ # chkconfig --list | grep -i fire
SUSEfirewall2_init 0:off 1:off 2:off 3:off 4:off 5:off 6:off B:on
SUSEfirewall2_setup 0:off 1:off 2:off 3:on 4:on 5:on 6:off
于是:
linux:~ # chkconfig SUSEfirewall2_setup off
linux:~ # chkconfig --list | grep -i fire
SUSEfirewall2_init 0:off 1:off 2:off 3:off 4:off 5:off 6:off B:on
SUSEfirewall2_setup 0:off 1:off 2:off 3:off 4:off 5:off 6:off
linux:~ # chkconfig --level B SUSEfirewall2_init off
linux:~ # chkconfig --list | grep -i fire
SUSEfirewall2_init 0:off 1:off 2:off 3:off 4:off 5:off 6:off
SUSEfirewall2_setup 0:off 1:off 2:off 3:off 4:off 5:off 6:off
至此,系統(tǒng)的防火墻完成關閉了。