Detections
Analytics

1.195 RHEL-09-253075

Information

RHEL 9 must not enable IPv4 packet forwarding unless the system is a router.

GROUP ID: V-257970
RULE ID: SV-257970r1045011

Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this capability is used when not required, system network information may be unnecessarily transmitted across the network.

Solution

Configure RHEL 9 to not allow IPv4 packet forwarding, unless the system is a router.

Add or edit the following line in a single system configuration file, in the "/etc/sysctl.d/" directory:

net.ipv4.conf.all.forwarding = 0

Load settings from all system configuration files with the following command:

$ sudo sysctl --system

See Also

https://workbench.cisecurity.org/benchmarks/22008

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-257970r1045011_rule, STIG-ID|RHEL-09-253075, Vuln-ID|V-257970

Plugin: Unix

Control ID: 8d7f5e3e0b00020c8f98361ea2790269739fee6bdd6273ef4fdb15172ca47fc1