Detections
Analytics

GEN005560 - The system must be configured with a default gateway for IPv4 if the system uses IPv4, unless the system is a router.

Information

If a system has no default gateway defined, the system is at increased risk of man-in-the-middle, monitoring, and Denial of Service attacks.

Solution

Create or edit /etc/defaultrouter to contain the default gateway address.

Procedure (for a default gateway of 192.168.3.1):
# echo '192.168.3.1' > /etc/defaultrouter

Restart the system for the setting to take effect.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_SPARC_V2R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-227002r603265_rule, STIG-ID|GEN005560, STIG-Legacy|SV-30079, STIG-Legacy|V-4397, Vuln-ID|V-227002

Plugin: Unix

Control ID: d14651419c508743321f460b4281c84f3e9180377d9981bb9021bff11d022e9d