How to Stop and Disable Firewalld on CentOS 7

FirewallD is a complete firewall solution that dynamically manages the trust level of network connections and interfaces. It gives you full control over what traffic is allowed or disallowed to and from the system.
Starting with CentOS 7, FirewallD replaces iptables as the default firewall management tool.

Check the Firewall Status

To view the current status of the FirewallD service you can use the firewall-cmd command:

# sudo firewall-cmd --state


Disable Firewall

You can temporarily stop the FirewallD service with the following command:

sudo systemctl stop firewalld

Copy

However this change will be valid for the current runtime session only.
To permanently disable the firewall on your CentOS 7 system, follow the steps below:

1. First, stop the FirewallD service with:
   

   sudo systemctl stop firewalld

2. Disable the FirewallD service to start automatically on system boot:
   

   sudo systemctl disable firewalld

   The output from the command above will look something like this:
   

   Removed symlink /etc/systemd/system/multi-user.target.wants/firewalld.service.
   Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.

3. Mask the FirewallD service which will prevent the firewall from being started by other services:
   

   sudo systemctl mask --now firewalld

   As you can see from the output the mask command simply creates a symlink from the firewalld service to /dev/null:
   

   Created symlink from /etc/systemd/system/firewalld.service to /dev/null.

Conclusion

In this tutorial, you learned how to stop and permanently disable the firewall on a CentOS 7 machine.