mediumnetworkverified ✓rollback-safe
Ensure nftables is installed
nftables-installed · RHEL ≥ 8 · 2 impls
Description
The nftables package provides the framework for packet filtering. It replaces legacy iptables and is the recommended firewall backend.
Rationale
Network traffic filtering is essential for security. nftables provides a modern, performant filtering framework. It should be installed even if firewalld is used as the frontend.
Check → Remediate
Checkpackage_state
- name:
- nftables
- state:
- present
Remediatepackage_present
- name:
- nftables
Framework references
CIS
rhel9 4.1.1
NIST 800-53
SC-7AC-4
Live verification
rhel9:check
#firewall#nftables#network#package