3.10 Disable Response to Multicast Echo Request - ipv6

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

These settings control whether Solaris responds to multicast IPv4 and IPv6 echo requests.

Rationale:

Reduce attack surface by restricting this vector used for host discovery and to prevent
denial of service attacks.

Solution

To enforce this setting for IPv4 packets, use the command:

# ipadm set-prop -p _respond_to_echo_multicast=0 ipv4

To enforce this setting for IPv6 packets, use the command:

# ipadm set-prop -p _respond_to_echo_multicast=0 ipv6

See Also

https://workbench.cisecurity.org/files/2582