Fix a bug: 7.7.5.3 for ip6tables.

2019-09-25 15:52:57 +08:00 · 2019-09-25 15:52:57 +08:00 · 16e1eeb5bf
parent 02a9a64fc0
commit 16e1eeb5bf
1 changed files with 1 additions and 1 deletions
--- a/bin/hardening/7.7.5.3_ensure_firewall_rules_exist_for_all_open_ports_for_v6.sh
+++ b/bin/hardening/7.7.5.3_ensure_firewall_rules_exist_for_all_open_ports_for_v6.sh
@ -39,7 +39,7 @@ audit () {
 			if [ "$PROTO_TYPE" == 'udp6' ]; then
 				PROTO_TYPE="udp"
 			fi
-			LISTEN_PORT=$(echo ${LISTENING} | awk '{print $4}' | awk -F: '{print $4}')
+			LISTEN_PORT=$(echo ${LISTENING} | awk '{print $4}' | awk -F: '{print $NF}')
 			if [ $($IPS6 -S | grep "^\-A INPUT \-p $PROTO_TYPE" | grep -c "\-\-dport $LISTEN_PORT \-m state \-\-state NEW \-j ACCEPT") -ge 1 ]; then
        		info "Service: protocol $PROTO_TYPE listening port $LISTEN_PORT was set ipv6 firewall rules."
 			else