UCF STIG Viewer Logo

The system must not have IP forwarding for IPv6 enabled, unless the system is an IPv6 router.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22491 GEN005610 SV-38822r1_rule ECSC-1 Medium
Description
If the system is configured for IP forwarding and is not a designated router, it could be used to bypass network security by providing a path for communication not filtered by network devices.
STIG Date
AIX 5.3 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2014-10-03

Details

Check Text ( C-37068r1_chk )
# /usr/sbin/no -o ip6forwarding
If the value returned is 1, this is a finding.
Fix Text (F-32335r1_fix)
Disable IPv6 forwarding on the system.
# /usr/sbin/no -p -o ip6forwarding=0