3.3.3 directed_broadcast

Information

The directed_broadcast parameter determines whether or not the system allows a directed broadcast to a network gateway.

Rationale:

The directed_broadcast parameter will be set to 0, to prevent directed broadcasts being sent network gateways. This would prevent a redirected packet from reaching a remote network.

Solution

In /etc/tunables/nextboot, add the directed_broadcast entry:

no -p -o directed_broadcast=0

This makes the change permanent by adding the entry into /etc/tunables/nextboot

Default Value:

1

See Also

https://workbench.cisecurity.org/files/4119

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7(9)

Plugin: Unix

Control ID: 4bfdf36f4de9cd73ecc6085ce35407509b2e390fd998a9f8a8765ddfa5eaf7dc