>From 11fa767b0aaf6e4a76ac839c49c55db8f548c597 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Wed, 19 Sep 2012 14:28:22 -0400 Subject: [PATCH 13/14] Created OCIL for set_iptables_default_rule_forward - Created OCIL for set_iptables_default_rule_forward --- RHEL6/input/system/network/iptables.xml | 5 +++++ 1 files changed, 5 insertions(+), 0 deletions(-) diff --git a/RHEL6/input/system/network/iptables.xml b/RHEL6/input/system/network/iptables.xml index 31237b7..95016fa 100644 --- a/RHEL6/input/system/network/iptables.xml +++ b/RHEL6/input/system/network/iptables.xml @@ -157,6 +157,11 @@ the applicable rules in the table are examined for a match. Setting the default policy to DROP implements proper design for a firewall, i.e. any packets which are not explicitly permitted should not be accepted. +Run the following command to ensure the default FORWARD policy is DROP: +
grep ":FORWARD" /etc/sysconfig/iptables
+The output should be simular to the following: +
# grep ":FORWARD" /etc/sysconfig/iptables
+:FORWARD DROP [0:0
-- 1.7.1