UCF STIG Viewer Logo

The system must not have IP forwarding for IPv6 enabled, unless the system is an IPv6 router.


Overview

Finding ID Version Rule ID IA Controls Severity
V-220110 GEN005610 SV-220110r603266_rule Medium
Description
If the system is configured for IP forwarding and is not a designated router, it could be used to bypass network security by providing a path for communication not filtered by network devices.
STIG Date
Solaris 10 X86 Security Technical Implementation Guide 2022-09-07

Details

Check Text ( C-21819r490147_chk )
Check if the system is configured for IPv6 forwarding.
# ndd /dev/ip6 ip6_forwarding
If the value is not 0, this is a finding.
Fix Text (F-21818r490148_fix)
Disable IPv6 forwarding.
# ndd -set /dev/ip6 ip6_forwarding 0
Edit startup scripts as necessary; add this command or remove commands setting the value to 1.