This script is Copyright (C) 2010-2015 Tenable Network Security, Inc.
The remote host has IP forwarding enabled.
The remote host has IP forwarding enabled. An attacker can exploit
this to route packets through the host and potentially bypass some
firewalls / routers / NAC filtering.
Unless the remote host is a router, it is recommended that you disable
On Linux, you can disable IP forwarding by doing :
echo 0 > /proc/sys/net/ipv4/ip_forward
On Windows, set the key 'IPEnableRouter' to 0 under
On Mac OS X, you can disable IP forwarding by executing the command :
sysctl -w net.inet.ip.forwarding=0
For other systems, check with your vendor.
Risk factor :
Medium / CVSS Base Score : 5.8
Nessus Plugin ID: 50686 ()
CVE ID: CVE-1999-0511
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.