Detections
Analytics

3.14 Disable TCP Reverse IP Source Routing

Information

This setting controls whether TCP reverses the IP source routing option for incoming connections.

If IP source routing is needed for diagnostic purposes, enable it. Otherwise disable it.

Solution

To enforce this setting, run the following command:

# ipadm set-prop -p _rev_src_routes=0 tcp

See Also

https://workbench.cisecurity.org/benchmarks/4777

Item Details

Category: SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CA-9, 800-53|SC-7, 800-53|SC-7(5), CSCv7|9.4

Plugin: Unix

Control ID: 553313d182cab59f644c065b8ee94f61670892e58dedf1cf875721cd69fe4e69