3.5.3.1.2 Ensure nftables is not installed with iptables

Information

nftables is a subsystem of the Linux kernel providing filtering and classification of network packets/datagrams/frames and is the successor to iptables.

Running both iptables and nftables may lead to conflict.

Solution

Run the following command to remove nftables :

# yum remove nftables

See Also

https://workbench.cisecurity.org/benchmarks/8415

Item Details

Category: SECURITY ASSESSMENT AND AUTHORIZATION, CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CA-9, 800-53|CM-6, 800-53|CM-7, 800-53|SC-7, 800-53|SC-7(5), CSCv7|9.4

Plugin: Unix

Control ID: d31f8cd22a0542f3fcb620ff1cb61a596a630f0ed5e5087dfef92523af647b15