Detections
Analytics
UBTU-16-030550 - The Ubuntu operating system must not respond to Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) echoes sent to a broadcast address.
Information
Responding to broadcast Internet Control Message Protocol (ICMP) echoes facilitates network mapping and provides a vector for amplification attacks.Solution
Configure the Ubuntu operating system to not respond to Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) echoes sent to a broadcast address with the following command:# sudo sysctl -w net.ipv4.icmp_echo_ignore_broadcasts=1
If '1' is not the system's default value then add or update the following line in '/etc/sysctl.conf' or in the appropriate file under '/etc/sysctl.d':
net.ipv4.icmp_echo_ignore_broadcasts=1
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CAN_Ubuntu_16-04_LTS_V2R3_STIG.zip
Item Details
Audit Name: DISA STIG Ubuntu 16.04 LTS v2r3
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-215148r610931_rule, STIG-ID|UBTU-16-030550, STIG-Legacy|SV-90557, STIG-Legacy|V-75877, Vuln-ID|V-215148
Plugin: Unix
Control ID: 7be86ae8c4f1588199ad840136229e9cb0670423aaf74a022787286ec1a9d0e6