1，查看iptables并關閉服務、禁止自啟動

~]# service iptables status
~]# service iptables  stop
~]# chkconfig  iptables  off
~]# service iptables status

2，關閉selinux

~]# sed -i 's@SELINUX=.*@SELINUX=disabled@' /etc/selinux/config
~]# setenforce 0

3，重啟生效，并確認狀態

~]# reboot
~]# getenforce

4，查看啟動的服務

~]# netstat -tnlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name
tcp        0      0 0.0.0.0:111                 0.0.0.0:*                   LISTEN      1321/rpcbind
tcp        0      0 0.0.0.0:22                  0.0.0.0:*                   LISTEN      1626/sshd
tcp        0      0 0.0.0.0:43638               0.0.0.0:*                   LISTEN      1449/rpc.statd
tcp        0      0 127.0.0.1:631               0.0.0.0:*                   LISTEN      1505/cupsd
tcp        0      0 127.0.0.1:25                0.0.0.0:*                   LISTEN      1706/master
tcp        0      0 :::111                      :::*                        LISTEN      1321/rpcbind
tcp        0      0 :::22                       :::*                        LISTEN      1626/sshd
tcp        0      0 ::1:631                     :::*                        LISTEN      1505/cupsd
tcp        0      0 ::1:25                      :::*                        LISTEN      1706/master
tcp        0      0 :::49753                    :::*                        LISTEN      1449/rpc.statd

5，關閉無關rpcbind 、rpcbind 、cupsd服務

~]# service nfslock stop
~]# chkconfig nfslock off
~]# service rpcbind stop
~]# chkconfig rpcbind off
~]# service cups stop
~]# chkconfig cups off

6，查看現有服務

~]# netstat -tnlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name
tcp        0      0 0.0.0.0:22                  0.0.0.0:*                   LISTEN      1596/sshd
tcp        0      0 127.0.0.1:25                0.0.0.0:*                   LISTEN      1676/master
tcp        0      0 :::22                       :::*                        LISTEN      1596/sshd
tcp        0      0 ::1:25                      :::*                        LISTEN      1676/master