Ensure IPv4 outbound and established connections are configured

DüşükDüzey 2Manuel incelemebottlerocket

Açıklama

Configure the firewall rules for new outbound, and established connections. Manual review against site policy.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

Run the following command and verify all rules for new outbound, and established connections match site policy: # iptables -L -v -n

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Configure iptables in accordance with site policy. The following commands will implement a policy to allow all outbound connections and all established connections: # iptables -A OUTPUT -p tcp -m state --state NEW,ESTABLISHED -j ACCEPT # iptables -A OUTPUT -p udp -m state --state NEW,ESTABLISHED -j ACCEPT # iptables -A OUTPUT -p icmp -m state --state NEW,ESTABLISHED -j ACCEPT # iptables -A INPUT -p tcp -m state --state ESTABLISHED -j ACCEPT # iptables -A INPUT -p udp -m state --state ESTABLISHED -j ACCEPT # iptables -A INPUT -p icmp -m state --state ESTABLISHED -j ACCEPT

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: bottlerocketnetwork
Referans: CIS Bottlerocket Benchmark v1.0.0 - 3.4.1.3 Ensure IPv4 outbound and established connections are configured