Detections
Analytics
GEN005600 - IP forwarding for IPv4 must not be enabled, unless the system is a router.
Information
If the system is configured for IP forwarding and is not a designated router, it could be used to bypass network security by providing a path for communication not filtered by network devices.Solution
Disable IPv4 forwarding on the system.#no -p -o ipforwarding=0
See Also
https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip
Item Details
Audit Name: DISA STIG AIX 6.1 v1r14
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Group-ID|V-12023, Rule-ID|SV-38821r1_rule, STIG-ID|GEN005600, Vuln-ID|V-12023
Plugin: Unix
Control ID: 98acb10ab52ec66daf17776886f6ba6baf57393b36f30475b9771a0d7836245f