[PATCH] Fixed typo in example iptables network/netmask pair for limiting ssh port to trusted networks.

Andrew Gilmore agilmore2 at gmail.com
Fri Sep 28 17:21:39 UTC 2012


Signed-off-by: Andrew Gilmore <agilmore2 at gmail.com>
---
 RHEL6/input/services/ssh.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/RHEL6/input/services/ssh.xml b/RHEL6/input/services/ssh.xml
index 4370eb8..93427ac 100644
--- a/RHEL6/input/services/ssh.xml
+++ b/RHEL6/input/services/ssh.xml
@@ -369,7 +369,7 @@ Edit the files <tt>etc/sysconfig/iptables</tt> and <tt>/etc/sysconfig/ip6tables<
 (if IPv6 is in use). In each file, locate the line:
 <pre>-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT</pre>
 and replace it with:
-<pre>-A RH-Firewall-1-INPUT -s netwk /mask -m state --state NEW -p tcp --dport 22 -j ACCEPT</pre>
+<pre>-A RH-Firewall-1-INPUT -s netwk/mask -m state --state NEW -p tcp --dport 22 -j ACCEPT</pre>
 </description>
 <rationale>
 Restricting SSH access to only trusted network segments reduces exposure of the SSH 
-- 
1.7.4.4



More information about the scap-security-guide mailing list