Network Interfaces IP Forwarding Enabled
- Query id: 4216ebac-d74c-4423-b437-35025cb88af5
- Query name: Network Interfaces IP Forwarding Enabled
- Platform: Terraform
- Severity: Medium
- Category: Networking and Firewall
- URL: Github
Description¶
Network Interfaces IP Forwarding should be disabled
Documentation
Code samples¶
Code samples with security vulnerabilities¶
Postitive test num. 1 - tf file
resource "azurerm_network_interface" "positive" {
name = "example-nic"
location = azurerm_resource_group.example.location
resource_group_name = azurerm_resource_group.example.name
ip_configuration {
name = "internal"
subnet_id = azurerm_subnet.example.id
private_ip_address_allocation = "Dynamic"
}
enable_ip_forwarding = true
}
Code samples without security vulnerabilities¶
Negative test num. 1 - tf file
resource "azurerm_network_interface" "negative1" {
name = "example-nic"
location = azurerm_resource_group.example.location
resource_group_name = azurerm_resource_group.example.name
ip_configuration {
name = "internal"
subnet_id = azurerm_subnet.example.id
private_ip_address_allocation = "Dynamic"
}
enable_ip_forwarding = false
}
Negative test num. 2 - tf file
resource "azurerm_network_interface" "negative2" {
name = "example-nic"
location = azurerm_resource_group.example.location
resource_group_name = azurerm_resource_group.example.name
ip_configuration {
name = "internal"
subnet_id = azurerm_subnet.example.id
private_ip_address_allocation = "Dynamic"
}
}