UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The system must not respond to Internet Control Message Protocol [ICMPv4] echoes sent to a broadcast address.


Overview

Finding ID Version Rule ID IA Controls Severity
V-51309 OSX8-00-01190 SV-65519r1_rule Medium
Description
The system must not respond to Internet Control Message Protocol [ICMPv4] echoes sent to a broadcast address.
STIG Date
Apple OS X 10.8 (Mountain Lion) Workstation STIG 2015-02-10

Details

Check Text ( C-53657r1_chk )
To check if the system is configured to respond to ICMP echoes, run the following command:

sudo sysctl net.inet.icmp.bmcastecho | awk '{ print $NF }'

If the value is not set to "1", this is a finding.
Fix Text (F-56109r1_fix)
To disable ICMP responses to broadcast traffic add the following line to /etc/sysctl.conf:

net.inet.icmp.bmcastecho=1