← Back to IBM AIX 7.x Security Technical Implementation Guide

V-215263

CAT II (Medium)

IP forwarding for IPv4 must not be enabled on AIX unless the system is a router.

Rule ID

SV-215263r991589_rule

STIG

IBM AIX 7.x Security Technical Implementation Guide

Version

V3R2

CCIs

CCI-000366

Discussion

IP forwarding permits the kernel to forward packets from one network interface to another. The ability to forward packets between two networks is only appropriate for systems acting as routers.

Check Content

From the command prompt, run the following command:

# no -o ipforwarding 
ipforwarding = 0

If the value returned is not "0", this is a finding.

Fix Text

Disable IPv4 forwarding on the system by running command:
# no -p -o ipforwarding=0