GEN003601 - TCP backlog queue sizes must be set appropriately.

Information

To provide some mitigation to TCP DoS attacks, the clear_partial_conns parameter must be enabled.

Solution

# /usr/sbin/no -po clean_partial_conns=1

See Also

https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip

Item Details

Audit Name: DISA STIG AIX 6.1 v1r14

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Group-ID|V-23741, Rule-ID|SV-38796r1_rule, STIG-ID|GEN003601, Vuln-ID|V-23741

Plugin: Unix

Control ID: 2f546bcb7281ed11002749851106c9c327bc9f0c6f987ba8708ee1327f392204