+NET.3.2.A3 Configuring Appropriate Filter Rules on the Packet Filter (B)

NET.3.2.A3 Configuring Appropriate Filter Rules on the Packet Filter (B)

Based on the firewall rules from NET.3.2.A2 Definition of Firewall Rules, appropriate filter rules must be defined and configured for the packet filter.

A packet filter MUST be configured to discard any invalid TCP flag combinations. As a matter of principle, filtering MUST always be performed in a stateful manner. Stateful filter rules MUST also be configured for the connectionless protocols UDP and ICMP. A firewall MUST filter the ICMP and ICMPv6 protocols restrictively.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.39 Malware
blocks G 0.40 Denial of Service
blocks G 0.41 Sabotage
blocks G 0.43 Attack with Specially Crafted Messages
blocks G 0.46 Loss of Integrity of Sensitive Information