Detections
Analytics

GEN007780 - The system must not have 6to4 enabled.

Information

6to4 is an IPv6 transition mechanism involving tunneling IPv6 packets encapsulated in IPv4 packets on an ad-hoc basis. This is not a preferred transition strategy and increases the attack surface of the system.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Disable the active 6to4 tunnel.
# ip link set <tunnel> down
Add this command to a startup script, or remove the configuration creating the tunnel.

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-4, CAT|II, CCI|CCI-001551, Group-ID|V-22545, Rule-ID|SV-37610r1_rule, STIG-ID|GEN007780, Vuln-ID|V-22545

Plugin: Unix

Control ID: 6728e086fc7541d160c3ca61959d76f411fa0fcb5e5ff310b57000b86ba4f649