Detections
Analytics

4.4.1.3 Ensure ufw is not in use with iptables

Information

Uncomplicated Firewall (UFW) is a program for managing a netfilter firewall designed to be easy to use.

 - Uses a command-line interface consisting of a small number of simple commands
 - Uses iptables for configuration

Running iptables.persistent with ufw enabled may lead to conflict and unexpected results.

Solution

Run the following command to remove ufw :

# apt purge ufw

- OR -

Run the following commands to disable ufw, and stop and mask ufw.service :

# ufw disable
# systemctl stop ufw.service
# systemctl mask ufw.service

Note: ufw disable needs to be run before systemctl mask ufw.service in order to correctly disable UFW

See Also

https://workbench.cisecurity.org/benchmarks/21369

Item Details

Category: SECURITY ASSESSMENT AND AUTHORIZATION, CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CA-9, 800-53|CM-7, 800-53|SC-7, 800-53|SC-7(5), CSCv7|9.4

Plugin: Unix

Control ID: c36655af9feeb9d06d331f357995dfd27bb6bf2190cdacf29cf9ca6600b9d4a8