Detections
Analytics
AIX7-00-002066 - AIX must not have IP forwarding for IPv6 enabled unless the system is an IPv6 router.
Information
If the system is configured for IP forwarding and is not a designated router, it could be used to bypass network security by providing a path for communication not filtered by network devices.Solution
Disable IPv6 forwarding on the system:# /usr/sbin/no -p -o ip6forwarding=0
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R3_STIG.zip
Item Details
Audit Name: DISA IBM AIX 7.x STIG v3r3
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-215265r991589_rule, STIG-ID|AIX7-00-002066, STIG-Legacy|SV-101807, STIG-Legacy|V-91709, Vuln-ID|V-215265
Plugin: Unix
Control ID: bf876280864dd864c1f7cb0ff6dfb4772d903c364c9ff97117bbbb7ec31a90b6