a676e37a84
* Docs are now ordered by STIG ID number to make them easier to browse. * Deployer notes are better organized. * Script + CSV added for automated documentation generation. Implements: blueprint security-hardening Change-Id: Ib87bec701eddf1601574f4e027f301c775e5e1cd
17 lines
750 B
ReStructuredText
17 lines
750 B
ReStructuredText
V-38542: The system must use a reverse-path filter for IPv4 network traffic when possible on all interfaces.
|
|
------------------------------------------------------------------------------------------------------------
|
|
|
|
Enabling reverse path filtering drops packets with source addresses that
|
|
should not have been able to be received on the interface they were received
|
|
on. It should not be used on systems which are routers for complicated
|
|
networks, but is helpful for end hosts and routers serving small networks.
|
|
|
|
Details: `V-38542 in STIG Viewer`_.
|
|
|
|
.. _V-38542 in STIG Viewer: https://www.stigviewer.com/stig/red_hat_enterprise_linux_6/2015-05-26/finding/V-38542
|
|
|
|
Notes for deployers
|
|
~~~~~~~~~~~~~~~~~~~
|
|
|
|
.. include:: developer-notes/V-38542.rst
|