|Platform: Amazon Linux||Date: (C)2018-10-29 (M)2018-11-30|
Set Default ip6tables Policy for Incoming Packets
To set the default policy to DROP (instead of ACCEPT) for
the built-in INPUT chain which processes incoming packets,
add or correct the following line in
':INPUT DROP [0:0]'
If changes were required, reload the ip6tables rules:
'$ sudo service ip6tables reload'
In 'ip6tables', the default policy is applied only after all
the applicable rules in the table are examined for a match. Setting the
default policy to 'DROP' implements proper design for a firewall, i.e.
any packets which are not explicitly permitted should not be
No Remediation Info
|SCAP Repo OVAL Definition||oval:org.secpod.oval:def:48245|