一、完整自检命令
1.确认网口状态是否为0(改成自己的网口名)
sysctl net.ipv4.conf.enP1s32f0.rp_filter
2.确认iptables是空
iptables -nvL
3.确认firewalld关闭
systemctl status firewalld
4.确认KySec/selinux还是disable
getstatus
二、关闭操作
1.完整关闭全部KySec安全增强(三权+文件保护+内核模块保护全部关掉)
security-switch --set none
reboot
2.修改网口状态
2.1临时修改(改成本机网卡):
sudo sysctl -w net.ipv4.conf.all.rp_filter=0
sudo sysctl -w net.ipv4.conf.enp2s0.rp_filter=0
2.2永久生效:
sudo cat >> /etc/sysctl.conf <<EOF
net.ipv4.conf.all.rp_filter=0
net.ipv4.conf.enp2s0.rp_filter=0
EOF
sudo sysctl -p
3.关闭防火墙
systemctl stop firewalld
systemctl disable firewalld
4.清除端口封禁规则
iptables -F
iptables -X
iptables -Z
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -nvL