diff --git a/scripts/install/rhel.sh b/scripts/install/rhel.sh
index 223adab73..25245b46b 100644
--- a/scripts/install/rhel.sh
+++ b/scripts/install/rhel.sh
@@ -83,8 +83,6 @@ if [ ! -f /usr/sbin/firewalld ];then
     #取消服务锁定
     systemctl unmask firewalld
     systemctl start firewalld
-
-    sed -i 's#AllowZoneDrifting=yes#AllowZoneDrifting=no#g' /etc/firewalld/firewalld.conf
     
     # look
     # firewall-cmd --list-all
@@ -101,7 +99,7 @@ if [ ! -f /usr/sbin/firewalld ];then
     # firewall-cmd --permanent --zone=public --add-port=3306/tcp
     # firewall-cmd --permanent --zone=public --add-port=30000-40000/tcp
 
-    # sed -i 's#AllowZoneDrifting=yes#AllowZoneDrifting=no#g' /etc/firewalld/firewalld.conf
+    sed -i 's#AllowZoneDrifting=yes#AllowZoneDrifting=no#g' /etc/firewalld/firewalld.conf
     firewall-cmd --reload
 
     #安装时不开启