Detections
Analytics

GEN003610 - The system must not send IPv4 ICMP redirects.

Information

ICMP redirect messages are used by routers to inform hosts a more direct route exists for a particular destination. These messages contain information from the system's route table possibly revealing portions of the network topology.

Solution

#/usr/sbin/no -p -o ipsendredirects=0

See Also

https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-4, CAT|II, CCI|CCI-001551, Group-ID|V-22417, Rule-ID|SV-38802r1_rule, STIG-ID|GEN003610, Vuln-ID|V-22417

Plugin: Unix

Control ID: 944643e3387c92ca279710b8ca19c70d662562329908fe6c87b6ed05e98bab32