Ensuring packet redirect sending is disabled

Recommendation 3.1.2 of the version 2.2.0 RHEL benchmark is somewhat more detailed—this is a scored level 1 benchmark that ensures that your servers do not send routing information to other hosts. Unless they have been configured as a router, there should be no good reason for them to do this.

From the documentation itself, we can see that the recommended audit commands (and results) are as follows:

$ sysctl net.ipv4.conf.all.send_redirects net.ipv4.conf.all.send_redirects = 0$ sysctl net.ipv4.conf.default.send_redirects net.ipv4.conf.default.send_redirects = 0$ grep "net\.ipv4\.conf\.all\.send_redirects" /etc/sysctl.conf /etc/sysctl.d/*net.ipv4.conf.all.send_redirects = 0$ grep "net\.ipv4\.conf\.default\.send_redirects" ...

Get Hands-On Enterprise Automation on Linux now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.