Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
RHEL 10 must not forward Internet Protocol version 4 (IPv4) source-routed packets by default.
Description
Discussion Text
Source-routed packets allow the source of the packet to suggest routers forward the packet along a different path than configured on the router, which can be used to bypass network security measures.
Accepting source-routed packets in the IPv4 protocol has few legitimate uses. It must be disabled unless it is absolutely required, such as when IPv4 forwarding is enabled and the system is legitimately functioning as a router.
Satisfies: SRG-OS-000420-GPOS-00186, SRG-OS-000142-GPOS-00078
Accepting source-routed packets in the IPv4 protocol has few legitimate uses. It must be disabled unless it is absolutely required, such as when IPv4 forwarding is enabled and the system is legitimately functioning as a router.
Satisfies: SRG-OS-000420-GPOS-00186, SRG-OS-000142-GPOS-00078
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.