Detections
Analytics

SOL-11.1-050060 - The system must not respond to multicast echo requests.

Information

Multicast echo requests can be useful for reconnaissance of systems and for denial of service attacks.

Solution

The Network Management profile is required.

Disable respond to echo multi-cast for IPv4 and IPv6.

# pfexec ipadm set-prop -p _respond_to_echo_multicast=0 ipv4
# pfexec ipadm set-prop -p _respond_to_echo_multicast=0 ipv6

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_11_x86_V3R6_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-216136r959010_rule, STIG-ID|SOL-11.1-050060, STIG-Legacy|SV-61057, STIG-Legacy|V-48185, Vuln-ID|V-216136

Plugin: Unix

Control ID: 89da0e4d77bd3c3f86ba450c567eb940fd29751ecd281cff5fd903a80998278d