4.3.1.2 Ensure nftables is not installed with iptables

Information

nftables is a subsystem of the Linux kernel providing filtering and classification of network packets/datagrams/frames and is the successor to iptables.

Running both iptables and nftables may lead to conflict.

Solution

Run the following command to remove nftables :

# apt purge nftables

See Also

https://workbench.cisecurity.org/benchmarks/17045

Item Details

Category: SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CA-9, 800-53|SC-7, 800-53|SC-7(5), CSCv7|9.4

Plugin: Unix

Control ID: 0746993fcded72c375a2a235e2b395ddf9eead09e273029871a0e57fe250fd7e