3.5.3.3.6 Ensure ip6tables is enabled and running - enabled

Information

ip6tables.service is a utility for configuring and maintaining ip6tables.

Rationale:

ip6tables.service will load the iptables rules saved in the file /etc/sysconfig/ip6tables at boot, otherwise the ip6tables rules will be cleared during a re-boot of the system.

Solution

Run the following command to enable and start ip6tables:

# systemctl --now start ip6tables

See Also

https://workbench.cisecurity.org/files/3636

Item Details

Category: SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CA-9, 800-53|SC-7, 800-53|SC-7(5), CSCv7|9.4

Plugin: Unix

Control ID: 2655bff234b65a6383815d486338bcd765a13d63f0950643ffd55cd843fad5a2