3.094 - The system is configured to allow IP source routing.

Information

Protects against IP source routing spoofing.

Solution

Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> 'MSS- (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' to 'Highest protection, source routing is completely disabled'.

See Also

http://iasecontent.disa.mil/stigs/zip/Oct2016/U_Windows_Vista_V6R41_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-29360r1_rule, STIG-ID|3.094, Vuln-ID|V-4110

Plugin: Windows

Control ID: 73d902bb81d23bec5f8ab5cd4548b2ea3a43118ae0cdd0098c4a008db10b9405