Ensure IPv6 outbound and established connections are configured

NiskaNivo 2Ručni pregledbottlerocket

Opis

Configure the firewall rules for new outbound, and established IPv6 connections. Manual review against site policy.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Run the following command and verify all rules for new outbound, and established connections match site policy: # ip6tables -L -v -n

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Configure iptables in accordance with site policy. The following commands will implement a policy to allow all outbound connections and all established connections: # ip6tables -A OUTPUT -p tcp -m state --state NEW,ESTABLISHED -j ACCEPT # ip6tables -A OUTPUT -p udp -m state --state NEW,ESTABLISHED -j ACCEPT # ip6tables -A OUTPUT -p icmp -m state --state NEW,ESTABLISHED -j ACCEPT # ip6tables -A INPUT -p tcp -m state --state ESTABLISHED -j ACCEPT # ip6tables -A INPUT -p udp -m state --state ESTABLISHED -j ACCEPT # ip6tables -A INPUT -p icmp -m state --state ESTABLISHED -j ACCEPT

Svojstva

Operativni sistemi: Bilo koji
Oznake: bottlerocketnetwork
Referenca: CIS Bottlerocket Benchmark v1.0.0 - 3.4.2.3 Ensure IPv6 outbound and established connections are configured