Detections
Analytics

1.205 SLES-15-040370

Information

The SUSE operating system must not send Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirects.

GROUP ID: V-235023
RULE ID: SV-235023r991589

ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table, possibly revealing portions of the network topology.

Solution

Configure the SUSE operating system to not allow interfaces to perform IPv4 ICMP redirects by running the following command as an administrator:

sudo sysctl -w net.ipv4.conf.all.send_redirects=0

If "0" is not the system's default value, add or update the following line in "/etc/sysctl.d/99-stig.conf":

sudo sh -c 'echo "net.ipv4.conf.all.send_redirects=0" >> /etc/sysctl.d/99-stig.conf' sudo sysctl --system

See Also

https://workbench.cisecurity.org/benchmarks/23779

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-235023r991589_rule, STIG-ID|SLES-15-040370, Vuln-ID|V-235023

Plugin: Unix

Control ID: f9027999ca3d62f63461ff68437c3e2cfb85223bdb1fd74520313ec322e387b3