Detections
Analytics
GEN003609 - The system must ignore IPv4 ICMP redirect messages.
Information
ICMP redirect messages are used by routers to inform hosts a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.Solution
Configure the system to ignore IPv4 ICMP redirect messages.#/usr/sbin/no -p -o ipignoreredirects=1
See Also
https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip
Item Details
Audit Name: DISA STIG AIX 6.1 v1r14
Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT
References: 800-53|AC-4, 800-53|CM-6d., CAT|II, CCI|CCI-001503, CCI|CCI-001551, Group-ID|V-22416, Rule-ID|SV-38801r1_rule, STIG-ID|GEN003609, Vuln-ID|V-22416
Plugin: Unix
Control ID: 2442ff21a06b819f6375b78306d446312997c1023fd27f1148179e657a4ef71d