Detections
Analytics
GEN005570 - The system must be configured with a default gateway for IPv6 if the system uses IPv6, unless the system is a router.
Information
If a system has no default gateway defined, the system is at increased risk of man-in-the-middle, monitoring, and Denial of Service attacks.Solution
Add a default route for IPv6.Edit /etc/sysconfig/network-scripts/ifcfg-eth0 (substitute interface as appropriate).
Add an IPV6_DEFAULTGW=<gateway> configuration setting.
Restart the interface.
# ifdown eth0; ifup eth0
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_5_V2R1_STIG.zip
Item Details
Audit Name: DISA STIG for Oracle Linux 5 v2r1
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-218620r603259_rule, STIG-ID|GEN005570, STIG-Legacy|SV-64107, STIG-Legacy|V-22490, Vuln-ID|V-218620
Plugin: Unix
Control ID: 4ac7278c75410db1c464e79e534299602c699de7ec99bed184cdf21c8988d252