UCF STIG Viewer Logo

The system must not send IPv6 ICMP redirects.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22551 GEN007880 SV-26938r1_rule ECSC-1 Medium
Description
ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table revealing portions of the network topology.
STIG Date
SOLARIS 9 SPARC SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-10-01

Details

Check Text ( C-27886r1_chk )
Verify the system is configured to not send IPv6 ICMP redirect messages.
# ndd /dev/ip6 ip6_send_redirects
If the returned value is not 0, this is a finding.
Fix Text (F-24183r1_fix)
Configure the system to not send IPv6 ICMP redirect messages.
# ndd -set /dev/ip6 ip6_send_redirects 0

Also, add this command to a system startup script.