Detections
Analytics
UBTU-16-030570 - The Ubuntu operating system must ignore Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect messages.
Information
Internet Control Message Protocol (ICMP) redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages modify the host's route table and are unauthenticated. An illicit ICMP redirect message could result in a man-in-the-middle attack.Solution
Configure the Ubuntu operating system to ignore Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect messages with the following command:# sudo sysctl -w net.ipv4.conf.all.accept_redirects=0
If '0' is not the system's default value then add or update the following line in '/etc/sysctl.conf' or in the appropriate file under '/etc/sysctl.d':
net.ipv4.conf.all.accept_redirects=0
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CAN_Ubuntu_16-04_LTS_V2R3_STIG.zip
Item Details
Audit Name: DISA STIG Ubuntu 16.04 LTS v2r3
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-215150r610931_rule, STIG-ID|UBTU-16-030570, STIG-Legacy|SV-90561, STIG-Legacy|V-75881, Vuln-ID|V-215150
Plugin: Unix
Control ID: ba73edbcade16ea3c51a5da2c246002ee36bff8003812b577f1b02f0e0b4dd29