{"action":"created","issue":{"url":"https://api.github.com/repos/chef/inspec/issues/845","repository_url":"https://api.github.com/repos/chef/inspec","labels_url":"https://api.github.com/repos/chef/inspec/issues/845/labels{/name}","comments_url":"https://api.github.com/repos/chef/inspec/issues/845/comments","events_url":"https://api.github.com/repos/chef/inspec/issues/845/events","html_url":"https://github.com/chef/inspec/issues/845","id":167456421,"number":845,"title":"Address all test related to iptables resource. ","user":{"login":"kdshah1","id":17769559,"avatar_url":"https://avatars.githubusercontent.com/u/17769559?v=3","gravatar_id":"","url":"https://api.github.com/users/kdshah1","html_url":"https://github.com/kdshah1","followers_url":"https://api.github.com/users/kdshah1/followers","following_url":"https://api.github.com/users/kdshah1/following{/other_user}","gists_url":"https://api.github.com/users/kdshah1/gists{/gist_id}","starred_url":"https://api.github.com/users/kdshah1/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kdshah1/subscriptions","organizations_url":"https://api.github.com/users/kdshah1/orgs","repos_url":"https://api.github.com/users/kdshah1/repos","events_url":"https://api.github.com/users/kdshah1/events{/privacy}","received_events_url":"https://api.github.com/users/kdshah1/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/chef/inspec/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-07-25T20:22:15Z","updated_at":"2016-07-26T09:06:24Z","closed_at":null,"body":"### Description\r\n\r\nCurrently there's  no test for iptables is empty and maybe other test to address all the iptables related policies and rules.\r\n### InSpec and Platform Version\r\nInspec - 0.26.0\r\nTell us which version of InSpec (`inspec version` or SHA of a commit) and Operating System distribution you are using\r\n Red Hat Enterprise Linux Workstation release 6.8 (Santiago)\r\n### Replication Case\r\nHoe do you check if the iptables INPUT chain is empty?\r\n\r\nTell us what steps to take to replicate your problem.  See [How to create a Minimal, Complete, and Verifiable example](https://stackoverflow.com/help/mcve)\r\nfor information on how to create a good replication case.\r\n\r\n### Possible Solutions\r\nAdd is_empty check in the iptables resource.\r\nIf you have already ideas how to solve the issue, add them here.\r\n\r\n### Stacktrace\r\n\r\nPlease include the stacktrace output or link to a gist of it, if there is one.\r\n"},"comment":{"url":"https://api.github.com/repos/chef/inspec/issues/comments/235206099","html_url":"https://github.com/chef/inspec/issues/845#issuecomment-235206099","issue_url":"https://api.github.com/repos/chef/inspec/issues/845","id":235206099,"user":{"login":"chris-rock","id":1178413,"avatar_url":"https://avatars.githubusercontent.com/u/1178413?v=3","gravatar_id":"","url":"https://api.github.com/users/chris-rock","html_url":"https://github.com/chris-rock","followers_url":"https://api.github.com/users/chris-rock/followers","following_url":"https://api.github.com/users/chris-rock/following{/other_user}","gists_url":"https://api.github.com/users/chris-rock/gists{/gist_id}","starred_url":"https://api.github.com/users/chris-rock/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/chris-rock/subscriptions","organizations_url":"https://api.github.com/users/chris-rock/orgs","repos_url":"https://api.github.com/users/chris-rock/repos","events_url":"https://api.github.com/users/chris-rock/events{/privacy}","received_events_url":"https://api.github.com/users/chris-rock/received_events","type":"User","site_admin":false},"created_at":"2016-07-26T09:06:24Z","updated_at":"2016-07-26T09:06:24Z","body":"A sample iptables rules collection was highlighted by @fcaviggia @kdshah1 in our gitter chat\r\n\r\n```\r\n*filter\r\n:INPUT DROP [0:0]\r\n:FORWARD DROP [0:0]\r\n:OUTPUT ACCEPT [0:0]\r\n# Allow Traffic that is established or related\r\n-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT\r\n# Allow ICMP (Ping)\r\n-A INPUT -p icmp -j ACCEPT\r\n# Allow Traffic on LOCALHOST/127.0.0.1\r\n-A INPUT -i lo -j ACCEPT\r\n# SSH/SCP/SFTP\r\n-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT\r\n# Block timestamp-request and timestamp-reply\r\n-A INPUT -p ICMP --icmp-type timestamp-request -j DROP\r\n-A INPUT -p ICMP --icmp-type timestamp-reply -j DROP\r\n-A INPUT -j REJECT --reject-with icmp-host-prohibited\r\n-A FORWARD -j REJECT --reject-with icmp-host-prohibited\r\nCOMMIT\r\n```"}}
{"actor":{"display_login":"chris-rock"}}