Install iptables-persistent Package

Classification:

compliance

Framework:

Control:

Description

The iptables-persistent package can be installed with the following command:


$ apt-get install iptables-persistent

Rationale

A method of configuring and maintaining firewall rules is necessary to configure a Host Based Firewall.

Remediation

Shell script

The following script can be run on the host to remediate the issue.

DEBIAN\_FRONTEND=noninteractive apt-get install -y "iptables-persistent"

Ansible playbook

The following playbook can be run with Ansible to remediate the issue.

- name: Ensure iptables-persistent is installed
 package:
 name: iptables-persistent
 state: present
 tags:
 - enable\_strategy
 - low\_complexity
 - low\_disruption
 - medium\_severity
 - no\_reboot\_needed
 - package\_iptables-persistent\_installed