UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The system must not send IPv4 ICMP redirects.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22417 GEN003610 SV-38802r1_rule ECSC-1 Medium
Description
ICMP redirect messages are used by routers to inform hosts a more direct route exists for a particular destination. These messages contain information from the system's route table possibly revealing portions of the network topology.
STIG Date
AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-06-16

Details

Check Text ( C-37258r1_chk )
# /usr/sbin/no -o ipsendredirects
If the value is not 0, this is a finding.
Fix Text (F-32499r1_fix)

#/usr/sbin/no -p -o ipsendredirects=0