Detections
Analytics
GEN005600 - IP forwarding for IPv4 must not be enabled, unless the system is a router.
Information
If the system is configured for IP forwarding and is not a designated router, it could be used to bypass network security by providing a path for communication not filtered by network devices.Solution
Disable IPv4 forwarding on the system.#no -p -o ipforwarding=0
See Also
http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip
Item Details
Audit Name: DISA AIX 5.3 STIG v1r2
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-7(12), CAT|II, CCI|CCI-000366, Rule-ID|SV-38821r1_rule, STIG-ID|GEN005600, Vuln-ID|V-12023
Plugin: Unix
Control ID: 0a4e154d603fb649083e284872bf2be271ce65c057d0f6d170fcecc3289b8a36