GEN003604 - The system must not respond to ICMP timestamp requests sent to a broadcast address.

Information

The processing of Internet Control Message Protocol (ICMP) timestamp requests increases the attack surface of the system. Responding to broadcast ICMP timestamp requests facilitates network mapping and provides a vector for amplification attacks.

Solution

Configure the system to ignore ICMP Timestamp requests sent to broadcast addresses.
#no -po bcastping=0

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-4, CAT|II, CCI|CCI-001551, Rule-ID|SV-38798r1_rule, STIG-ID|GEN003604, Vuln-ID|V-22411

Plugin: Unix

Control ID: 1c5bafb6db7e477448aee9a9cb594a3704efa9edaa77763f54dd2c3347394b97