Detections
Analytics
GEN003606 - The system must prevent local applications from generating source-routed packets.
Information
Source-routed packets allow the source of the packet to suggest routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures.Solution
# /usr/sbin/no -po 'ipsrcroutesend=0'See Also
https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip
Item Details
Audit Name: DISA STIG AIX 6.1 v1r14
Category: ACCESS CONTROL
References: 800-53|AC-4, CAT|II, CCI|CCI-001551, Group-ID|V-22413, Rule-ID|SV-38949r1_rule, STIG-ID|GEN003606, Vuln-ID|V-22413
Plugin: Unix
Control ID: 854d4d6df8cbf2c728086d22fbaabd50a9c08d170a5cb085cd661bb13017ea2f