UCF STIG Viewer Logo

The system must not apply reversed source routing to TCP responses.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22412 GEN003605 SV-26075r1_rule ECSC-1 Medium
Description
Source-routed packets allow the source of the packet to suggest that routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures.
STIG Date
UNIX SRG 2013-03-26

Details

Check Text ( C-29250r1_chk )
Determine if the system is configured to apply reverse source routing to TCP responses to source-routed packets. If so, this is a finding.
Fix Text (F-26269r1_fix)
Configure the system to not apply reverse source routing to TCP responses to source-routed packets.