The system must not apply reversed source routing to TCP responses.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22412	GEN003605	SV-35028r1_rule	ECSC-1	Medium

Description
Source-routed packets allow the source of the packet to suggest routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures.

STIG	Date
HP-UX 11.23 Security Technical Implementation Guide	2013-11-04

Details

Check Text ( None )
None

Fix Text (F-31862r1_fix)
Disable the IP source-routed forwarding feature. # ndd -set /dev/ip ip_forward_src_routed 0 Edit /etc/rc.config.d/nddconf and add/set: TRANSPORT_NAME[x] = ip NDD_NAME[x] = ip_forward_src_routed NDD_VALUE[x] = 0