[Forgot Password]
Login  Register Subscribe

24437

 
 

131815

 
 

116564

 
 

909

 
 

91325

 
 

141

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-92060-3

Platform: Amazon LinuxDate: (C)2018-10-29   (M)2018-11-30



Set Default iptables Policy for Incoming Packets To set the default policy to DROP (instead of ACCEPT) for the built-in INPUT chain which processes incoming packets, add or correct the following line in '/etc/sysconfig/iptables': ':INPUT DROP [0:0]'


Parameter:


Technical Mechanism: In 'iptables' the default policy is applied only after all the applicable rules in the table are examined for a match. Setting the default policy to 'DROP' implements proper design for a firewall, i.e. any packets which are not explicitly permitted should not be accepted. Fix: No Remediation Info

References:

Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:48247


OVAL    2
oval:org.secpod.oval:def:48247
oval:org.secpod.oval:def:49001
XCCDF    2
xccdf_org.secpod_benchmark_general_Amazon_Linux_AMI
xccdf_org.secpod_benchmark_general_Amazon_Linux_2

© SecPod Technologies