系统：CentOS 7 搭建 LAMP（Linux+Apache+Mysql+PHP） 服务器 初始设置 查看 linux 系统版本 cat /etc/redhat-release 更新系统 yum update yum upgrate 检查当前系统是否已安装 apache 和 mysql yum list installed | grep httpd rpm -qa | grep httpd yum list installed | grep mysql rpm -qa | grep mysql 如果已经存在，请先执行卸载命令，不同的安装方式使用不同的卸载方式，例: yum remove httpd 或

rpm -e httpd

或

make uninstall httpd

添加apache和mysql用户

useradd -s /sbin/nologin -M apache

useradd -s /sbin/nologin -M mysql

CentOS 7.0 默认使用的是firewall作为防火墙，修改为iptables防火墙

1. 关闭firewall 停止firewall

   systemctl stop firewalld.service

   禁止firewall开机启动

   systemctl disable firewalld.service

   2.安装iptables防火墙

   yum install iptables-services

   编辑防火墙配置文件

   vi /etc/sysconfig/iptables

   编辑 iptables 文件内容

   Firewall configuration written by system-config-firewall

   Manual customization of this file is not recommended.

   *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 3306 -j ACCEPT -A INPUT -j REJECT --reject-with icmp-host-prohibited -A FORWARD -j REJECT --reject-with icmp-host-prohibited COMMIT