← Back to VMware vRealize Automation 7.x Lighttpd Security Technical Implementation Guide

V-240275

CAT II (Medium)

Lighttpd must disable IP forwarding.

Rule ID

SV-240275r879887_rule

STIG

VMware vRealize Automation 7.x Lighttpd Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-000366

Discussion

IP forwarding permits Lighttpd to forward packets from one network interface to another. The ability to forward packets between two networks is only appropriate for systems acting as routers. Lighttpd is not implemented as a router. With the url.redirect configuration parameter, Lighttpd can be configured to forward IPv4 packets. This configuration parameter is prohibited, unless Lighttpd is redirecting packets to localhost, 127.0.0.1.

Check Content

At the command prompt, execute the following command: 

grep -E 'url\.redirect' /opt/vmware/etc/lighttpd/lighttpd.conf | grep -v '^#'

If any values are returned, this is a finding.

Fix Text

Navigate to /opt/vmware/etc/lighttpd/lighttpd.conf

In the "lighttpd.conf" file, delete all lines that are returned containing url.redirect returned.