Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The system must not send IPv4 ICMP redirects by default.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-51317 | OSX8-00-01210 | SV-65527r1_rule | Medium |
| Description |
|---|
| The system must not send IPv4 ICMP redirects by default. |
| STIG | Date |
|---|---|
| Apple OS X 10.8 (Mountain Lion) Workstation STIG | 2015-02-10 |
Details
| Check Text ( C-53665r1_chk ) |
|---|
| To check if the system is configured to send ICMP redirects, run the following command: sysctl net.inet.ip.redirect | awk '{ print $NF }' If the value is not set to "0", this is a finding. |
| Fix Text (F-56117r1_fix) |
|---|
| To disable ICMP redirects, add the following line to /etc/sysctl.conf: net.inet.ip.redirect=0 |