Detections
Analytics

GEN005600 - IP forwarding for IPv4 must not be enabled, unless the system is a router.

Information

If the system is configured for IP forwarding and is not a designated router, it could be used to bypass network security by providing a path for communication not filtered by network devices.

Solution

Disable IPv4 forwarding on the system.
# svcadm disable svc:/network/ipv4-forwarding

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_x86_V2R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-220109r603266_rule, STIG-ID|GEN005600, STIG-Legacy|SV-28581, STIG-Legacy|V-12023, Vuln-ID|V-220109

Plugin: Unix

Control ID: a2cf0368aae7d4180541030de41ff25691b196099203d84966fdbcae58796902