TMA-PFSENSE-1.7
Ensure 'DNS Rebind Check' is unchecked
SedangLevel 1Otomatispfsense
Deskripsi
Ensure that the 'DNS Rebind Check' feature is unchecked to protect against DNS rebinding attacks. FAILs when 'Disable DNS Rebinding Checks' is ticked (<nodnsrebindcheck> present); the CIS title means this box must stay unchecked. Audited against the pfSense config.xml (Diagnostics > Backup & Restore > Download configuration, or /cf/conf/config.xml).
Cara pemeriksaan
Metode audit: Pola konfigurasi
- Pola
<nodnsrebindcheck(?:\s*/>|>[^<]*</nodnsrebindcheck>)
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
GUI: System > Advanced > Admin Access: clear Disable DNS Rebinding Checks, Save. # CIS guidance: In the GUI - Navigate to System > Advance - Uncheck on 'DNS Rebind Check' Field
Properti
- Sistem operasi
- Apa saja
- Tag
- pfsensehardening
- Referensi
- CIS pfSense Firewall Benchmark v1.1.0 - 1.7 Ensure 'DNS Rebind Check' is unchecked
Periksa host ini
Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.
shell
tmaegis scan --target pfsense