GEN007950 - The system must not respond to ICMPv6 echo requests sent to a broadcast address.

Information

Responding to broadcast ICMP echo requests facilitates network mapping and provides a vector for amplification attacks.

Solution

Configure the system to not respond to IPv6 multicast ICMP ECHO_REQUESTs.
# /usr/sbin/no -p -o bcastping=0

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Audit Name: DISA AIX 5.3 STIG v1r2

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7(12), CAT|II, CCI|CCI-000366, Rule-ID|SV-38829r1_rule, STIG-ID|GEN007950, Vuln-ID|V-23972

Plugin: Unix

Control ID: 7a0ea32e2cdfb4a27efdc1667d7cc90aa9c2563dbf20e9d2f69c256e79f63822