Detections
Analytics
GEN007920 - The system must not forward IPv6 source-routed packets.
Information
Source-routed packets allow the source of the packet to suggest routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures. This requirement applies only to the forwarding of source-routed traffic, such as when IPv6 forwarding is enabled and the system is functioning as a router.Solution
Configure the system so it does not forward IPv6 source-routed packets.# /usr/sbin/no -p -o ip6srcrouteforward=0
See Also
http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip
Item Details
Audit Name: DISA AIX 5.3 STIG v1r2
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-7(12), CAT|II, CCI|CCI-001551, Rule-ID|SV-38827r1_rule, STIG-ID|GEN007920, Vuln-ID|V-22553
Plugin: Unix
Control ID: fd894e4837edb1e4c4daf44e5ca0619b68d3076a27b95a60c9ded624193f4337