3.4.4.3.6 Ensure ip6tables is enabled and active

Information

ip6tables.service is a utility for configuring and maintaining ip6tables

ip6tables.service will load the iptables rules saved in the file /etc/sysconfig/ip6tables at boot, otherwise the ip6tables rules will be cleared during a re-boot of the system.

Solution

Run the following commands to unmask, enable and start ip6tables.service :

# systemctl unmask ip6tables.service
# systemctl --now start ip6tables.service

See Also

https://workbench.cisecurity.org/benchmarks/15964

Item Details

Category: SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CA-9, 800-53|SC-7, 800-53|SC-7(5), CSCv7|9.4

Plugin: Unix

Control ID: c8ed01c96480c9a913d2689df43eae79f21cfd1937cd69f366c214d451db366e