Detections
Analytics
SOL-11.1-050080 - The system must set strict multihoming.
Information
These settings control whether a packet arriving on a non-forwarding interface can be accepted for an IP address that is not explicitly configured on that interface.This rule is NA for documented systems that have interfaces that cross strict networking domains (for example, a firewall, a router, or a VPN node).
Solution
The Network Management profile is required.Disable strict multihoming for IPv4 and IPv6.
# pfexec ipadm set-prop -p _strict_dst_multihoming=1 ipv4
# pfexec ipadm set-prop -p _strict_dst_multihoming=1 ipv6
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_11_SPARC_V3R6_STIG.zip
Item Details
Audit Name: DISA Solaris 11 SPARC STIG v3r6
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216375r959010_rule, STIG-ID|SOL-11.1-050080, STIG-Legacy|SV-61065, STIG-Legacy|V-48193, Vuln-ID|V-216375
Plugin: Unix
Control ID: 5e26164924750587676bb725c83306a27d20cf2054b90b9b22c5b1bb34b58a25