Disabled Firewall Automatically Enabled Upon Startup
Symptom
- Run the chkconfig command in the OS to disable the firewall. See Figure 2-46.
- Restart the OS and check the firewall configuration in the OS. The information shown in Figure 2-47 indicates that the firewall is enabled again.
Figure 2-48 shows the expected output information after the firewall is disabled.
Cause Analysis
A Libvirt software package is installed in the OS. Libvirt requires the firewall to be enabled, and Libvirt automatically enables the firewall after an OS restart. However, the RAC or database scenario requires the firewall to be disabled. The firewall requirements of virtualization and RAC scenarios conflict with each other.
Run the command as shown in Figure 2-49 to check whether a Libvirt software packge is installed.
Solution
Uninstall the Libvirt software package, or adopt the minimum installation mode for OS installation.
- For details about the uninstallation method, see Figure 2-50.
After uninstalling the Libvirt software package, run the chkconfig iptables off command to disable the firewall.
- For details about the minimum OS installation, see Step 31 in OS Installation.