The system must disable directed broadcast packet forwarding.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-48165	SOL-11.1-050010	SV-61037r1_rule		Low

Description
This parameter must be disabled to reduce the risk of denial of service attacks.

STIG	Date
Solaris 11 SPARC Security Technical Implementation Guide	2017-03-02

Details

Check Text ( C-50595r1_chk )
Determine if directed broadcast packet forwarding is disabled. # ipadm show-prop -p _forward_directed_broadcasts -co current ip If the output of this command is not "0", this is a finding.

Fix Text (F-51773r1_fix)
The Network Management profile is required. Disable directed broadcast packet forwarding. # pfexec ipadm set-prop -p _forward_directed_broadcasts=0 ip