Detections
Analytics

GEN003610 - The system must not send IPv4 ICMP redirects - 'net.ipv4.conf.default.send_redirects'

Information

ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table possibly revealing portions of the network topology.

Solution

Configure the system to not send IPv4 ICMP redirect messages.
Edit /etc/sysctl.conf and add a setting for 'net.ipv4.conf.all.send_redirects=0' and 'net.ipv4.conf.default.send_redirects=0'.
# sysctl -p

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-4, CAT|II, CCE|CCE-4155-8, CCI|CCI-001551, Group-ID|V-22417, Rule-ID|SV-37629r1_rule, STIG-ID|GEN003610, Vuln-ID|V-22417

Plugin: Unix

Control ID: 5cda5cd5aa9bb8672f934dfef28b716eded6e3d38f0b3f7ecca3affefa6311e4