Detections
Analytics
GEN005600 - IP forwarding for IPv4 must not be enabled, unless the system is a router.
Information
If the system is configured for IP forwarding and is not a designated router, it could be used to bypass network security by providing a path for communication not filtered by network devices.Solution
Edit '/etc/sysctl.conf' and set net.ipv4.ip_forward to '0'. Restart the system or run 'sysctl -p' to make the change take effect.See Also
http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip
Item Details
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCE|CCE-3561-8, CCI|CCI-000366, Group-ID|V-12023, Rule-ID|SV-37929r1_rule, STIG-ID|GEN005600, Vuln-ID|V-12023
Plugin: Unix
Control ID: 75ff1bd50aab9342d05191f0a4c86e65be46b639e2a72be667ebb5010b9ec305