From 32f5817007691d6c93b7fe210d4a49f8221c1eb2 Mon Sep 17 00:00:00 2001 From: Mark Bolwell Date: Tue, 26 Apr 2022 12:01:20 +0100 Subject: [PATCH] added missing test to 3.3.7 Signed-off-by: Mark Bolwell --- templates/etc/sysctl.d/60-netipv4_sysctl.conf.j2 | 1 + 1 file changed, 1 insertion(+) diff --git a/templates/etc/sysctl.d/60-netipv4_sysctl.conf.j2 b/templates/etc/sysctl.d/60-netipv4_sysctl.conf.j2 index 19a9fd3..308b914 100644 --- a/templates/etc/sysctl.d/60-netipv4_sysctl.conf.j2 +++ b/templates/etc/sysctl.d/60-netipv4_sysctl.conf.j2 @@ -40,6 +40,7 @@ net.ipv4.icmp_ignore_bogus_error_responses = 1 {% endif %} {% if rhel9cis_rule_3_3_7 %} # CIS 3.3.7 +net.ipv4.conf.all.rp_filter = 1 net.ipv4.conf.default.rp_filter = 1 {% endif %} {% if rhel9cis_rule_3_3_8 %}