SV-26632r1_rule
V-22417
GEN003610
GEN003610
CAT II
10
Configure the system to not send IPv4 ICMP redirect messages.
Procedure:
# ndd -set /dev/ip ip_send_redirects 0
Also add this command to a system startup script.
Verify the system does not send IPv4 ICMP redirect messages.
Procedure:
# ndd /dev/ip ip_send_redirects
If the result is not 0, this is a finding.
V-22417
False
GEN003610
Verify the system does not send IPv4 ICMP redirect messages.
Procedure:
# ndd /dev/ip ip_send_redirects
If the result is not 0, this is a finding.
M
System Administrator
22