Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The systems local firewall must implement a deny-all, allow-by-exception policy for forwarded packets.
Description
Discussion Text
In "iptables" the default policy is applied only after all the applicable rules in the table are examined for a match. Setting the default policy to "DROP" implements proper design for a firewall, i.e., any packets which are not explicitly permitted should not be accepted.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.