Detections
Analytics

GEN003610 - The system must not send IPv4 ICMP redirects.

Information

ICMP redirect messages are used by routers to inform hosts a more direct route exists for a particular destination. These messages contain information from the system's route table possibly revealing portions of the network topology.

Solution

#/usr/sbin/no -p -o ipsendredirects=0

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7(12), CAT|II, CCI|CCI-001551, Rule-ID|SV-38802r1_rule, STIG-ID|GEN003610, Vuln-ID|V-22417

Plugin: Unix

Control ID: 60e948421025af032e390b0ac2f2964cc00f2f242fd14805100714a8b0f304e4