TMA-AIX-4.5.6
Ensure ipforwarding is disabled
SedangLevel 1Otomatisaix
Deskripsi
The ipforwarding parameter determines whether or not the system forwards TCP/IP packets. The ipforwarding parameter will be set to 0, to ensure that redirected packets do not reach remote networks. This should only be enabled if the system is performing the function of an IP router. This is typically handled by a dedicated network device. Audit: `no -o ipforwarding` must report 0.
Cara pemeriksaan
Metode audit: Perintah shell
shell
command -v no >/dev/null 2>&1 || exit 1; out=$(no -o ipforwarding 2>/dev/null) || exit 1; printf '%s\n' "$out" | sed 's/[[:blank:]]*=[[:blank:]]*/=/'- Output yang diharapkan
ipforwarding=0
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
no -p -o ipforwarding=0 (sets the running value and makes it persistent in /etc/tunables/nextboot)
Properti
- Sistem operasi
- Apa saja
- Tag
- aixnetwork
- Referensi
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.5.6 Ensure ipforwarding is disabled
Periksa host ini
Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.
shell
tmaegis scan --target aix