Detections
Analytics

3.4.1.2 Ensure a single firewall utility is in use

Information

FreeBSD ships with multiple firewall utilities, providing uses with options to best suit their environment. This section provides guidance to ensure that only one firewall utility is implemented.

The use of more than one firewall utility may produce unexpected results.

Solution

Run the following script to ensure that a single firewall utility is in use on the system. If more than one firewall utility was found to be running then all other services except the desired one should be stopped and disabled.

For ipfilter run:

# service ipfilter stop
# service ipfilter disable

For ipfw run:

# service firewall stop
# service firewall disable

For pf run:

# service pf stop
# service pf disable

See Also

https://workbench.cisecurity.org/benchmarks/19044

Item Details

Category: SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CA-9, 800-53|SC-7, 800-53|SC-7(5), CSCv7|9.4

Plugin: Unix

Control ID: ae482e6b5be0c58d691fbb2cdeb714d955c782050e2a7246813a452f636a514a