Details

Disable IP forwarding to prevent incoming packets from being forwarded.

Solution

Add net.ipv4.ip_forward=0 to /etc/sysctl.conf

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Unix.

References

• 800-53|SC-7(12)
• CSCv6|9.2

Source

• Tenable.com/audits