Detections
Analytics

1.116 SOL-11.1-050010

Information

The system must disable directed broadcast packet forwarding.

GROUP ID: V-216131RULE ID: SV-216131r959010

This parameter must be disabled to reduce the risk of denial of service attacks.

Solution

The Network Management profile is required.

Disable directed broadcast packet forwarding.

pfexec ipadm set-prop -p _forward_directed_broadcasts=0 ip

See Also

https://workbench.cisecurity.org/benchmarks/23873

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-216131r959010_rule, STIG-ID|SOL-11.1-050010, Vuln-ID|V-216131

Plugin: Unix

Control ID: a4163e4d0b4ff1a752faf219b41d3405670e3cd555cc4f280edd5921dd07dde4