同时开启firewall和iptables

使用向导

With the iptables service, every single change means flushing all the old rules and reading all the new rules from /etc/sysconfig/iptables, while with firewalld there is no recreating of all the rules. Only the differences are applied. Consequently, firewalld can change the settings during runtime without existing connections being lost.

翻译

firewalld与iptables(和ip6tables)服务的本质区别是:

iptables服务将配置存储在/etc/sysconfig/iptables和/etc/sysconfig/ip6tables中，而firewalld将配置存储在/usr/lib/firewalld/和/etc/firewalld/中的各种XML文件中。注意，/etc/sysconfig/iptables文件不存在，因为在Red Hat Enterprise Linux上默认安装了firewalld。

在iptables服务中，每次更改都意味着刷新所有旧规则并从/etc/sysconfig/iptables读取所有新规则，而在firewalld中不需要重新创建所有规则。只应用差异。因此，firewalld可以在运行时更改设置，而不会丢失现有的连接。