In this say about the startup and shutdown commands on the firewall:
1) take effect after the restart
open: chkconfig iptables on
close: chkconfig iptables OFF
2) with immediate effect, after the restart failed
open: service iptables start
shut down: service iptables stop
Reproduced in: https: //my.oschina.net/garyun/blog/602926