cis-dil-benchmark-3.5.1.3 and cis-dil-benchmark-3.5.2.3 should include conntrack module #118
Description
Is your feature request related to a problem? Please describe.
cis benchmarks show false negative errors, conntrack is equivalent or better than state module for iptables.
Describe the solution you'd like
Running inspec against ubuntu devices using conntrack module for connection tracking should validate
-m conntrack --ctstate NEW,ESTABLISHED
as well as
-m state --state NEW,ESTABLISHED
Describe alternatives you've considered
Add -m state after -m conntrack works, but adds unnecessary lines to iptables
Additional context
Add any other context or screenshots about the feature request here.