Fix 3_3_7 and 5_2_20

defaults/main.yml

@@ -565,7 +565,7 @@ rhel9cis_logrotate: "daily"
 rhel9_cis_sshd_config_file: /etc/ssh/sshd_config
 
 rhel9cis_sshd:
-    clientalivecountmax: 0
+    clientalivecountmax: 3
     clientaliveinterval: 900
     logingracetime: 60
     # WARNING: make sure you understand the precedence when working with these values!!

tasks/post.yml

@@ -26,6 +26,24 @@
       - not system_is_container
       - "'procps-ng' in ansible_facts.packages"
 
+- name: POST | Update usr sysctl
+  block:
+     - name: POST | Set default.rp_filter
+       ansible.builtin.lineinfile:
+        path: /usr/lib/sysctl.d/50-default.conf
+        regexp: '^net.ipv4.conf.default.rp_filter'
+        line: net.ipv4.conf.default.rp_filter = 1
+
+     - name: POST | Set ALL rp_filter
+       ansible.builtin.lineinfile:
+        path: /usr/lib/sysctl.d/50-default.conf
+        regexp: '^net.ipv4.conf.*.rp_filter'
+        line: net.ipv4.conf.*.rp_filter = 1
+  when:
+      - rhel9cis_sysctl_update
+      - not system_is_container
+      - "'procps-ng' in ansible_facts.packages"
+
 - name: Flush handlers
   ansible.builtin.meta: flush_handlers