UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The system must not send IPv6 ICMP redirects.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22551 GEN007880 SV-38826r1_rule ECSC-1 Medium
Description
ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table that could reveal portions of the network topology.
STIG Date
AIX 5.3 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2014-10-03

Details

Check Text ( C-37077r1_chk )
# /usr/sbin/no -o ipsendredirects
If the value returned is not 0, this is a finding.
Fix Text (F-32349r1_fix)
Configure the system to not send IPv6 ICMP redirects.
# /usr/sbin/no -p -o ipsendredirects=0