CentOS 7 iptables 开放8080端口

# 安装iptables-services
[root@localhost bin]# yum install iptables-services
[root@localhost bin]# /bin/systemctl status iptables.service
# 临时开放端口
[root@localhost sysconfig]# iptables -I INPUT -p tcp --dport  -j ACCEPT
# 重启iptables临时端口失效
[root@localhost sysconfig]# /bin/systemctl restart iptables iptables.service
[root@localhost sysconfig]# vi /etc/sysconfig/iptables
======================================================================================
# Generated by iptables-save v1.4.21 on Fri May   ::
*filter
:INPUT ACCEPT [:]
:FORWARD ACCEPT [:]
:OUTPUT ACCEPT [:]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport  -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport  -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT
# Completed on Fri May   ::
# Generated by iptables-save v1.4.21 on Fri May   ::
*nat
:PREROUTING ACCEPT [:]
:INPUT ACCEPT [:]
:OUTPUT ACCEPT [:]
:POSTROUTING ACCEPT [:]
COMMIT
# Completed on Fri May   ::
======================================================================================
# -A INPUT -p tcp -m state --state NEW -m tcp --dport  -j ACCEPT
# 8080端口永久生效
[root@localhost sysconfig]# /bin/systemctl restart iptables iptables.service
[root@localhost sysconfig]# lsof -i:
COMMAND   PID USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
java     sony   48u  IPv6        0t0  TCP *:webcache (LISTEN)

# telnet 192.168.1.106