Ensure a single firewall utility is in use

Cara pemeriksaan

Metode audit: Perintah shell

command -v sysrc >/dev/null 2>&1 || exit 1; n=0; for k in firewall_enable ipfilter_enable pf_enable; do v=$(sysrc -q -n $k 2>/dev/null); case "$v" in [Yy][Ee][Ss]|[Tt][Rr][Uu][Ee]|[Oo][Nn]|1) n=$((n+1));; esac; done; [ "$n" -eq 1 ] && echo compliant || echo "$n firewall utilities enabled"

Output yang diharapkan

compliant

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Run the following script to ensure that a single firewall utility is in use on the system. If more than one firewall utility was found to be running then all other services except the desired one should be stopped and disabled. For ipfilter run: # service ipfilter stop # service ipfilter disable For ipfw run: # service firewall stop # service firewall disable For pf run: # service pf stop # service pf disable

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

tmaegis scan --target freebsd