TMAegisБета
Више правила за freebsd

FreeBSD

TMA-FREEBSD-3.4.1.2

Ensure a single firewall utility is in use

ВисокаНиво 1Аутоматскаfreebsd

Опис

FreeBSD ships with multiple firewall utilities, providing uses with options to best suit their environment. This section provides guidance to ensure that only one firewall utility is implemented. The use of more than one firewall utility may produce unexpected results. Audit: exactly one of firewall_enable (ipfw), ipfilter_enable or pf_enable must be YES.

Како се проверава

Метод провере: Команда љуске

shell
command -v sysrc >/dev/null 2>&1 || exit 1; n=0; for k in firewall_enable ipfilter_enable pf_enable; do v=$(sysrc -q -n $k 2>/dev/null); case "$v" in [Yy][Ee][Ss]|[Tt][Rr][Uu][Ee]|[Oo][Nn]|1) n=$((n+1));; esac; done; [ "$n" -eq 1 ] && echo compliant || echo "$n firewall utilities enabled"
Очекивани излаз
compliant

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

Run the following script to ensure that a single firewall utility is in use on the system. If more than one firewall utility was found to be running then all other services except the desired one should be stopped and disabled. For ipfilter run: # service ipfilter stop # service ipfilter disable For ipfw run: # service firewall stop # service firewall disable For pf run: # service pf stop # service pf disable

Својства

Оперативни системи
Било који
Ознаке
freebsdnetwork
Референца
CIS FreeBSD 14 Benchmark v1.0.1 - 3.4.1.2 Ensure a single firewall utility is in use

Проверите овај рачунар

Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.

shell
tmaegis scan --target freebsd