[PATCH] Fixed typo in example iptables network/netmask pair for limiting ssh port to trusted networks.

Andrew Gilmore agilmore2 at gmail.com
Mon Oct 1 15:52:44 UTC 2012


>
> Date: Sun, 30 Sep 2012 14:50:15 -0400
> From: Shawn Wells <shawn at redhat.com>
> To: scap-security-guide at lists.fedorahosted.org
> Subject: Re: [PATCH] Fixed typo in example iptables network/netmask
>         pair for        limiting ssh port to trusted networks.
> Message-ID: <50689467.5000400 at redhat.com>
> Content-Type: text/plain; charset=UTF-8; format=flowed
>
> On 9/28/12 1:21 PM, Andrew Gilmore wrote:
> > -<pre>-A RH-Firewall-1-INPUT -s netwk /mask -m state --state NEW -p tcp
> --dport 22 -j ACCEPT</pre>
> > +<pre>-A RH-Firewall-1-INPUT -s netwk/mask -m state --state NEW -p tcp
> --dport 22 -j ACCEPT</pre>
>
> Thanks for the catch! Ack
>
> Please push (or indicate you need someone to do so for you).
>
>
I don't have write access, this patch was mostly a drive by.

Please push.

My agency is attempting to STIG a CentOS 6 image themselves, and I both
don't have time to wait, and thought someone else was probably doing it.
I'm glad you all are, but seems like you're months out as well from
production release. I know, I know, it is done when it is done. :)

I should probably introduce myself, as well.
I work for a Dept. of Interior agency on databases and hydrology, but
sometimes dabble here and there. :) I have contributed to the CIS
benchmarks for RHEL 5 and 6, and have all of two lines of code in the linux
kernel. :)

Thanks,

Andrew
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20121001/672e3495/attachment.html>


More information about the scap-security-guide mailing list