Rules 3.5.3.2.4 and 3.5.3.3.4 are missing

[xpillons]

Status of the default deny iptables policy

Can be mitigated by
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP

The same for ipv6

ip6tables -P INPUT DROP
ip6tables -P OUTPUT DROP
ip6tables -P FORWARD DROP

[uk-bolly]

hi @xpillons

Thank you for highlighting this. I have also added these changes to the branch labelled 'outstanding'. I am currently updating the audit to be in compliance also before i can release this.
I am hoping that all the controls and issues you have raised are resolved in this branch.

Please feel free to pull in and test this.

Thank you again all the feedback helps.

uk-bolly

[uk-bolly]

This has been added to devel and running for some time.