Details

Disabling directed broadcast prevents packets directed to a gateway to be broadcasted on a remote network.

Solution

Configure directed_broadcast to 0.

# /usr/sbin/no -p -o directed_broadcast=0

Supportive Information

The following resource is also helpful.

• https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

• 800-53|AC-4(8)
• CAT|II
• CCI|CCI-000032
• Group-ID|V-29495
• Rule-ID|SV-38699r1_rule
• STIG-ID|GEN000000-AIX0200
• Vuln-ID|V-29495

Source

• Tenable.com/audits