Install iptables Package
An XCCDF Rule
Description
The iptables package can be installed with the following command:
$ sudo dnf install iptables
Rationale
iptables controls the Linux kernel network packet filtering
code. iptables allows system operators to set up firewalls and IP
masquerading, etc.
- ID
- xccdf_org.ssgproject.content_rule_package_iptables_installed
- Severity
- Medium
- References
- Updated
Remediation - OS Build Blueprint
[[packages]]
name = "iptables"
version = "*"
Remediation - Ansible
- name: Ensure iptables is installed
package:
name: iptables
state: present
when: ( ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman",
"container"] )
Remediation - Puppet
include install_iptables
class install_iptables {
package { 'iptables':
ensure => 'installed',
}