We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Describe the bug
Ubuntu1804-CIS/tasks/section3.yml
Line 516 in 5478c0e
It results in the following iptables rule: -A ufw-user-output -o all -j ACCEPT
-A ufw-user-output -o all -j ACCEPT
The desired iptables rule to allow all outbound traffic is: -A ufw-user-output -j ACCEPT
-A ufw-user-output -j ACCEPT
The CIS documentation that references the command ufw allow out on all is incorrect, it should be ufw allow out to any.
ufw allow out on all
ufw allow out to any
To Reproduce Steps to reproduce the behavior:
Expected behavior All outbound traffic to be permitted.
Software (please complete the following information):
Additional context Simply remove the referenced line (516) in section3.yml. Doing so will default the ufw command to any interface.
The text was updated successfully, but these errors were encountered:
No branches or pull requests
Describe the bug
Ubuntu1804-CIS/tasks/section3.yml
Line 516 in 5478c0e
'all' is not a valid interface name or keyword, as such applying this rule will block all outbound traffic.
It results in the following iptables rule:
-A ufw-user-output -o all -j ACCEPT
The desired iptables rule to allow all outbound traffic is:
-A ufw-user-output -j ACCEPT
The CIS documentation that references the command
ufw allow out on all
is incorrect, it should beufw allow out to any
.To Reproduce
Steps to reproduce the behavior:
Expected behavior
All outbound traffic to be permitted.
Software (please complete the following information):
Additional context
Simply remove the referenced line (516) in section3.yml. Doing so will default the ufw command to any interface.
The text was updated successfully, but these errors were encountered: