26.3.2 Controlling the iptables Firewall Service

If you want to use iptables instead of firewalld, first stop and disable the firewalld service before starting the iptables firewall service and enabling it to start when the system boots:

# systemctl stop firewalld
# systemctl disable firewalld
# systemctl start iptables
# systemctl enable iptables

To save any changes that you have made to the firewall rules to /etc/sysconfig/iptables, so that the service loads them when it next starts:

# /sbin/iptables-save > /etc/sysconfig/iptables

To restart the service so that it re-reads its rules from /etc/sysconfig/iptables:

# systemctl restart iptables

To stop the service:

# systemctl stop iptables

To control IPv6 filtering, use ip6tables instead of iptables.

For more information, see the iptables(8), and ip6tables(8) manual pages.