Ensure IPv6 outbound and established connections are configured

RendahLevel 2Tinjauan manualbottlerocket

Deskripsi

Configure the firewall rules for new outbound, and established IPv6 connections. Manual review against site policy.

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

Run the following command and verify all rules for new outbound, and established connections match site policy: # ip6tables -L -v -n

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Configure iptables in accordance with site policy. The following commands will implement a policy to allow all outbound connections and all established connections: # ip6tables -A OUTPUT -p tcp -m state --state NEW,ESTABLISHED -j ACCEPT # ip6tables -A OUTPUT -p udp -m state --state NEW,ESTABLISHED -j ACCEPT # ip6tables -A OUTPUT -p icmp -m state --state NEW,ESTABLISHED -j ACCEPT # ip6tables -A INPUT -p tcp -m state --state ESTABLISHED -j ACCEPT # ip6tables -A INPUT -p udp -m state --state ESTABLISHED -j ACCEPT # ip6tables -A INPUT -p icmp -m state --state ESTABLISHED -j ACCEPT

Properti

Sistem operasi: Apa saja
Tag: bottlerocketnetwork
Referensi: CIS Bottlerocket Benchmark v1.0.0 - 3.4.2.3 Ensure IPv6 outbound and established connections are configured