4.2.18 ip6forwarding

Information

The ip6forwarding parameter determines whether or not the system forwards IPv6 TCP/IP packets.

Rationale:

The ip6forwarding parameter will be set to 0, to ensure that redirected packets do not reach remote networks. This should only be enabled if the system is performing the function of an IP router. This is typically handled by a dedicated network device.

Solution

In /etc/tunables/nextboot, add the ip6forwarding entry:

no -p -o ip6forwarding=0

This makes the change permanent by adding the entry into /etc/tunables/nextboot

Default Value:

0

See Also

https://workbench.cisecurity.org/benchmarks/13069