Detections
Analytics
GEN005610 - The system must not have IP forwarding for IPv6 enabled, unless the system is an IPv6 router.
Information
If the system is configured for IP forwarding and is not a designated router, it could be used to bypass network security by providing a path for communication not filtered by network devices.Solution
Disable IPv6 forwarding on the system.# /usr/sbin/no -p -o ip6forwarding=0
See Also
http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip
Item Details
Audit Name: DISA AIX 5.3 STIG v1r2
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-7(12), CAT|II, CCI|CCI-000366, Rule-ID|SV-38822r1_rule, STIG-ID|GEN005610, Vuln-ID|V-22491
Plugin: Unix
Control ID: c80054d92944262ec01f57bc692d80d51a2e114308b601cd4a333de5ac9e0172