Skip to content

Configure firewall to Allow Access to the Web Server

An XCCDF Rule

Description

By default, firewalld blocks access to the ports used by the web server. To configure firewalld to allow http access, run the following command(s):

firewall-cmd --permanent --add-service=http
Then run the following command to load the newly created rule(s):
firewall-cmd --reload
To configure firewalld to allow https access, run the following command(s):
firewall-cmd --permanent --add-service=https
Then run the following command to load the newly created rule(s):
firewall-cmd --reload

Rationale

Failure to comply with DoD ports, protocols, and services (PPS) requirements can result in compromise of enclave boundary protections and/or functionality of the AIS.

ID
xccdf_org.ssgproject.content_rule_httpd_configure_firewall
Severity
Low
References
Updated