The operating system must connect to external networks or information systems only through managed IPv6 interfaces consisting of boundary protection devices arranged in accordance with an organizational security architecture.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-38551 | RHEL-06-000106 | SV-50352r2_rule | Medium |
| Description |
|---|
| The "ip6tables" service provides the system's host-based firewalling capability for IPv6 and ICMPv6. |
| STIG | Date |
|---|---|
| Red Hat Enterprise Linux 6 Security Technical Implementation Guide | 2014-06-11 |
Details
| Check Text ( C-46109r2_chk ) |
|---|
| If the system is a cross-domain system, this is not applicable. Run the following command to determine the current status of the "ip6tables" service: # service ip6tables status If the service is not running, it should return the following: ip6tables: Firewall is not running. If the service is not running, this is a finding. |
| Fix Text (F-43499r2_fix) |
|---|
| The "ip6tables" service can be enabled with the following commands: # chkconfig ip6tables on # service ip6tables start |