Ensure a single firewall utility is in use

Méthode de vérification

Méthode d'audit: Commande shell

command -v sysrc >/dev/null 2>&1 || exit 1; n=0; for k in firewall_enable ipfilter_enable pf_enable; do v=$(sysrc -q -n $k 2>/dev/null); case "$v" in [Yy][Ee][Ss]|[Tt][Rr][Uu][Ee]|[Oo][Nn]|1) n=$((n+1));; esac; done; [ "$n" -eq 1 ] && echo compliant || echo "$n firewall utilities enabled"

Sortie attendue

compliant

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Run the following script to ensure that a single firewall utility is in use on the system. If more than one firewall utility was found to be running then all other services except the desired one should be stopped and disabled. For ipfilter run: # service ipfilter stop # service ipfilter disable For ipfw run: # service firewall stop # service firewall disable For pf run: # service pf stop # service pf disable

Vérifier cet hôte

Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.

tmaegis scan --target freebsd