Ensure 'DNS Rebind Check' is unchecked

SrednjaNivo 1Automatskapfsense

Opis

Ensure that the 'DNS Rebind Check' feature is unchecked to protect against DNS rebinding attacks. FAILs when 'Disable DNS Rebinding Checks' is ticked (<nodnsrebindcheck> present); the CIS title means this box must stay unchecked. Audited against the pfSense config.xml (Diagnostics > Backup & Restore > Download configuration, or /cf/conf/config.xml).

Kako se proverava

Metod provere: Obrazac konfiguracije

Obrazac: <nodnsrebindcheck(?:\s*/>|>[^<]*</nodnsrebindcheck>)

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

GUI: System > Advanced > Admin Access: clear Disable DNS Rebinding Checks, Save. # CIS guidance: In the GUI - Navigate to System > Advance - Uncheck on 'DNS Rebind Check' Field

Svojstva

Operativni sistemi: Bilo koji
Oznake: pfsensehardening
Referenca: CIS pfSense Firewall Benchmark v1.1.0 - 1.7 Ensure 'DNS Rebind Check' is unchecked

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target pfsense