Oracle Linux 6 Security Technical Implementation Guide

The Oracle Linux 6 Security Technical Implementation Guide (V2 R7) has 267 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

267STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R7

CurrentPublished Thu Jan 26 2023

The operating system must prevent public IPv4 access into an organizations internal networks, except as appropriately mediated by managed interfaces employing boundary protection devices.

Oracle Linux 6 Security Technical Implementation Guide

Assessment Title

Rule Text

The operating system must prevent public IPv4 access into an organizations internal networks, except as appropriately mediated by managed interfaces employing boundary protection devices.

Description

Discussion Text

The "iptables" service provides the system's host-based firewalling capability for IPv4 and ICMP.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-219553

Rule

SV-219553r793810_rule

Severity

medium

Rule Version

OL6-00-000117

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

If the system is a cross-domain system, this is not applicable.

Run the following command to determine the current status of the "iptables" service: 

# service iptables status

If the service is not running, it should return the following: 

iptables: Firewall is not running.

If the service is not running, this is a finding.

Implementation Procedure

Fix Text

The "iptables" service can be enabled with the following commands: 

# chkconfig iptables on
# service iptables start

STIG check 222 of 267 in the Oracle Linux 6 STIG checklist

← Previous · V-219552The operating system must connect to external networks or information systems only through managed IPv4 interfaces consisting of boundary protection devices arranged in accordance with an organizational security architecture.Next · V-219554 →The systems local IPv4 firewall must implement a deny-all, allow-by-exception policy for inbound packets.