3.4.3.2 Ensure iptables are flushed with nftables

Information

nftables is a replacement for iptables, ip6tables, ebtables and arptables

It is possible to mix iptables and nftables. However, this increases complexity and also the chance to introduce errors. For simplicity flush out all iptables rules, and ensure it is not loaded

Solution

Run the following commands to flush iptables:

For iptables:

# iptables -F

For ip6tables:

# ip6tables -F

See Also

https://workbench.cisecurity.org/benchmarks/15965

Item Details

Category: SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CA-9, 800-53|SC-7, 800-53|SC-7(5), CSCv7|9.4

Plugin: Unix

Control ID: d47de0106634ece3cc0a16702898aa08ef6c0ec1fac3f9eaed1f8488378d0588