Detections
Analytics

1.422 RHEL-10-800210

Information

RHEL 10 must not enable Internet Protocol version 4 (IPv4) packet forwarding unless the system is a router.

GROUP ID: V-281353RULE ID: SV-281353r1167209

Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this capability is used when not required, system network information may be transmitted unnecessarily across the network.

Satisfies: SRG-OS-000420-GPOS-00186, SRG-OS-000142-GPOS-00084

Solution

Configure RHEL 10 to not allow IPv4 packet forwarding unless the system is a router.

Create a configuration file if it does not already exist:

$ sudo vi /etc/sysctl.d/ipv4_forwarding.conf

Add the following line to the file:

net.ipv4.conf.all.forwarding = 0

Reload settings from all system configuration files with the following command:

$ sudo sysctl --system

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-5, 800-53|SC-7(4), CAT|II, CCI|CCI-001108, CCI|CCI-002385, Rule-ID|SV-281353r1167209_rule, STIG-ID|RHEL-10-800210, Vuln-ID|V-281353

Plugin: Unix

Control ID: 2782faf1756375f927b7b1d4fd05c4525e81783dfa952d86edd46c2e9cd5e33b