Ensure ipforwarding is disabled

SrednjaNivo 1Automatskaaix

Opis

The ipforwarding parameter determines whether or not the system forwards TCP/IP packets. The ipforwarding parameter will be set to 0, to ensure that redirected packets do not reach remote networks. This should only be enabled if the system is performing the function of an IP router. This is typically handled by a dedicated network device. Audit: `no -o ipforwarding` must report 0.

Kako se proverava

Metod provere: Komanda ljuske

shell

command -v no >/dev/null 2>&1 || exit 1; out=$(no -o ipforwarding 2>/dev/null) || exit 1; printf '%s\n' "$out" | sed 's/[[:blank:]]*=[[:blank:]]*/=/'

Očekivani izlaz: ipforwarding=0

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

no -p -o ipforwarding=0 (sets the running value and makes it persistent in /etc/tunables/nextboot)

Svojstva

Operativni sistemi: Bilo koji
Oznake: aixnetwork
Referenca: CIS IBM AIX 7 Benchmark v1.2.0 - 4.5.6 Ensure ipforwarding is disabled

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target aix