UCF STIG Viewer Logo

The system must not have IP forwarding for IPv6 enabled, unless the system is an IPv6 router.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22491 GEN005610 SV-26166r1_rule ECSC-1 Medium
Description
If the system is configured for IP forwarding and is not a designated router, it could be used to bypass network security by providing a path for communication not filtered by network devices.
STIG Date
UNIX SRG 2013-03-26

Details

Check Text ( C-29273r1_chk )
If the system is a router, this is not applicable.
Determine if the system has IPv6 forwarding enabled. If so, this is a finding.
Fix Text (F-26300r1_fix)
Disable IPv6 forwarding on the system.