Linux distributions
CIS-LINUX-3.2.1
Ensure IP forwarding is disabled
SrednjaNivo 1Automatskalinux
Opis
The net.ipv4.ip_forward flag controls whether the system forwards packets. Disable it unless the host is a router.
Kako se proverava
Metod provere: Komanda ljuske
shell
sysctl -n net.ipv4.ip_forward- Očekivani izlaz
0
Kako se ispravlja
Metod ispravke: Komanda ljuske
shell
sysctl -w net.ipv4.ip_forward=0Svojstva
- Operativni sistemi
- ubuntu-22.04, ubuntu-24.04, rocky-9
- Oznake
- networksysctl
- Referenca
- CIS Ubuntu Linux / Rocky Linux Benchmarks - Ensure IP forwarding is disabled (verify section number for your release)
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
shell
tmaegis scan --target linux