Detections
Analytics

3.4.3.1.3 Ensure ufw is uninstalled or disabled with iptables

Information

Uncomplicated Firewall (UFW) is a program for managing a netfilter firewall designed to be easy to use.

 - Uses a command-line interface consisting of a small number of simple commands
 - Uses iptables for configuration

Running iptables.persistent with ufw enabled may lead to conflict and unexpected results.

Solution

Run one of the following commands to either remove ufw or stop and mask ufw

Run the following command to remove ufw :

# apt purge ufw

-OR-

Run the following commands to disable ufw :

# ufw disable
# systemctl stop ufw
# systemctl mask ufw

Note: ufw disable needs to be run before systemctl mask ufw in order to correctly disable UFW

See Also

https://workbench.cisecurity.org/benchmarks/13007

Item Details

Category: SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CA-9, 800-53|SC-7, 800-53|SC-7(5), CSCv7|9.4

Plugin: Unix

Control ID: 3232bcc3caf13de990496676bb5a3b0ddb614af2b3229563d3b81191c0b990bb