|Platform: Amazon Linux||Date: (C)2018-10-29 (M)2019-05-03|
Set Default iptables Policy for Incoming Packets
To set the default policy to DROP (instead of ACCEPT) for
the built-in INPUT chain which processes incoming packets,
add or correct the following line in
':INPUT DROP [0:0]'
In 'iptables' the default policy is applied only after all
the applicable rules in the table are examined for a match. Setting the
default policy to 'DROP' implements proper design for a firewall, i.e.
any packets which are not explicitly permitted should not be
No Remediation Info
|SCAP Repo OVAL Definition||oval:org.secpod.oval:def:48247|