AIX must not have IP forwarding for IPv6 enabled unless the system is an IPv6 router.
An XCCDF Rule
Description
<VulnDiscussion>If the system is configured for IP forwarding and is not a designated router, it could be used to bypass network security by providing a path for communication not filtered by network devices.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-215265r508663_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Disable IPv6 forwarding on the system:
# /usr/sbin/no -p -o ip6forwarding=0