Detections
Analytics

1.118 SOL-11.1-050010

Information

The system must disable directed broadcast packet forwarding.

GROUP ID: V-216368
RULE ID: SV-216368r959010

This parameter must be disabled to reduce the risk of denial of service attacks.

Solution

The Network Management profile is required.

Disable directed broadcast packet forwarding.

# pfexec ipadm set-prop -p _forward_directed_broadcasts=0 ip

See Also

https://workbench.cisecurity.org/benchmarks/23765

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-216368r959010_rule, STIG-ID|SOL-11.1-050010, Vuln-ID|V-216368

Plugin: Unix

Control ID: f655a98db70c936d80584cdbc840561bf32346acd449adc2bf4807884e4fa252