Detections
Analytics

GEN007780 - The system must not have 6to4 enabled.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

6to4 is an IPv6 transition mechanism involving tunneling IPv6 packets encapsulated in IPv4 packets on an ad-hoc basis. This is not a preferred transition strategy and increases the attack surface of the system.
 NOTE: Nessus has not performed this query, and this check is only provided for informational purposes.

Solution

Disable the active 6to4 tunnel.
# ip link set <tunnel> down
Add this command to a startup script, or remove the configuration creating the tunnel.

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R17_STIG.zip

Item Details

References: CAT|II, CCI|CCI-001551, Group-ID|V-22545, Rule-ID|SV-37610r1_rule, STIG-ID|GEN007780

Plugin: Unix

Control ID: 0783fb83c5a9bb8a2a1a7850b5aab57c7f2f91a9ebc6fe373551a459c8eb8b02