TMA-COS-3.3.3
Ensure iptables is installed
MediumLevel 1Manual reviewcos
Description
iptables allows configuration of the IPv4 and IPv6 tables in the linux kernel and the rules stored within them. Most firewall configuration utilities operate as a front end to iptables. iptables is required for firewall management and configuration.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Run the following command and verify iptables is installed: grep '\"name\": \"iptables\"' /etc/cos-package-info.json "name": "iptables"
How it is fixed
Fix method: Guidance or infrastructure patch
Update to an OS image that includes the iptables package.
Properties
- Operating systems
- Any
- Tags
- container-optimized-oscos
- Reference
- CIS Google Container-Optimized OS Benchmark v1.2.0 - 3.3.3 Ensure iptables is installed