Detections
Analytics
RHEL-10-800250 - RHEL 10 must not enable Internet Protocol version 6 (IPv6) packet forwarding unless the system is a router.
Information
IP forwarding permits the kernel to forward packets from one network interface to another. The ability to forward packets between two networks is only appropriate for systems acting as routers.Satisfies: SRG-OS-000420-GPOS-00186, SRG-OS-000142-GPOS-00088
Solution
Configure RHEL 10 to not allow IPv6 packet forwarding unless the system is a router.Create a configuration file if it does not already exist:
$ sudo vi /etc/sysctl.d/ipv6_forwarding.conf
Add the following line to the file:
net.ipv6.conf.all.forwarding = 0
Reload settings from all system configuration files with the following command:
$ sudo sysctl --system
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_10_V1R1_STIG.zip
Item Details
Audit Name: DISA Red Hat Enterprise Linux 10 STIG v1r1
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-5, 800-53|SC-7(8), CAT|II, CCI|CCI-001112, CCI|CCI-002385, Rule-ID|SV-281357r1167221_rule, STIG-ID|RHEL-10-800250, Vuln-ID|V-281357
Plugin: Unix
Control ID: ac66eed97dc93f8ffe847de89101b494d3c8684506474e31c88cf18da41c9567