Details
These settings control whether a packet arriving on a non-forwarding interface can be
accepted for an IP address that is not explicitly configured on that interface.
Rationale:
Enable this setting for systems that have interfaces that cross strict networking domains
(for example, a firewall or a VPN node).
Solution
To enforce this setting for IPv4 packets, use the command:
# ipadm set-prop -p _strict_dst_multihoming=1 ipv4
To enforce this setting for IPv6 packets, use the command:
# ipadm set-prop -p _strict_dst_multihoming=1 ipv6
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Unix.