Skip to content
Log In

Install iptables-services Package

An XCCDF Rule

Description

The iptables-services package can be installed with the following command: 
$ sudo yum install iptables-services

Rationale

iptables-services provides the services iptables and ip6tables that have been split out of the base package since they are not active by default anymore. These services load the iptables rules during the system startup and also allow one to reload the iptables rules during runtime.

ID
xccdf_org.ssgproject.content_rule_package_iptables-services_installed
Severity
Medium
References
Updated

Remediation Templates

A Puppet Snippet

include install_iptables-services
class install_iptables-services {
  package { 'iptables-services':
    ensure => 'installed',
  }
}

script:kickstart

package install iptables-services

OS Build Blueprint

[[packages]]
name = "iptables-services"
version = "*"

script:bootc

dnf install iptables-services

An Ansible Snippet

- name: Gather the package facts
  package_facts:
    manager: auto
  tags:
  - NIST-800-53-CM-6(a)
  - enable_strategy

Anaconda Pre-Install Instructions

package --add=iptables-services

A Shell Script

# Remediation is applicable only in certain platforms
if rpm --quiet -q iptables; then
if ! rpm -q --quiet "iptables-services" ; then
    yum install -y "iptables-services"
fi