部分一：關閉ipv6
# ip add sh
1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
link/ether 00:0c:29:7b:80:9b brd ff:ff:ff:ff:ff:ff
inet 172.24.0.20/24 brd 172.24.0.255 scope global eth1
inet6 fe80::20c:29ff:fe7b:809b/64 scope link
valid_lft forever preferred_lft forever
由上面的標識可知，當前系統的ipv6已經啟用了，那麼現在要將ipv6關閉：
# vi /etc/modprobe.conf
將“alias net-pf-10 ipv6”修改為如下：
alias net-pf-10 off
alias ipv6 off
然後重啟系統，一定要重啟系統才能看到效果。
# ip add sh
1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
2: eth1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
link/ether 00:0c:29:7b:80:9b brd ff:ff:ff:ff:ff:ff
inet 172.24.0.20/24 brd 172.24.0.255 scope global eth1
部分二：使用命令永久關閉防火牆
（1）首先查看當前防火牆的狀態
linux:~ # SUSEfirewall2 status
SuSE系統會默認啟用防火牆的，而且防火牆中默認存在很多規則。此時可以用下面命令立即關閉防火牆：
linux:~ # SuSEfirewall2 stop
SuSEfirewall2: Warning: ip6tables does not support state matching. Extended IPv6 support disabled.
SuSEfirewall2: batch committing...
SuSEfirewall2: Firewall rules unloaded.
（2）上面的操作只是確定當前系統已經關閉了防火牆，但不確保系統重啟後仍然是關閉防火牆的，所以還要進行下面的操作：
linux:~ # chkconfig --list | grep -i fire
SuSEfirewall2_init 0:off 1:off 2:off 3:off 4:off 5:off 6:off B:on
SuSEfirewall2_setup 0:off 1:off 2:off 3:on 4:on 5:on 6:off
於是：
linux:~ # chkconfig SuSEfirewall2_setup off
linux:~ # chkconfig --list | grep -i fire
SuSEfirewall2_init 0:off 1:off 2:off 3:off 4:off 5:off 6:off B:on
SuSEfirewall2_setup 0:off 1:off 2:off 3:off 4:off 5:off 6:off
linux:~ # chkconfig --level B SuSEfirewall2_init off
linux:~ # chkconfig --list | grep -i fire
SuSEfirewall2_init 0:off 1:off 2:off 3:off 4:off 5:off 6:off
SuSEfirewall2_setup 0:off 1:off 2:off 3:off 4:off 5:off 6:off
至此，系統的防火牆完成關閉了。
