RHEL 10 must not enable Internet Protocol version 4 (IPv4) packet forwarding unless the system is a router.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-281353 | RHEL-10-800210 | SV-281353r1167209_rule | CCI-002385 | medium |
| Description | ||||
| Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this capability is used when not required, system network information may be transmitted unnecessarily across the network. Satisfies: SRG-OS-000420-GPOS-00186, SRG-OS-000142-GPOS-00084 | ||||
| STIG | Date | |||
| Red Hat Enterprise Linux 10 Security Technical Implementation Guide | 2026-03-11 | |||
Details
Check Text (C-281353r1167209_chk)
Verify RHEL 10 is not performing IPv4 packet forwarding unless the system is a router.
Check that "net.ipv4.conf.all.forwarding" is disabled using the following command:
$ sudo sysctl net.ipv4.conf.all.forwarding
net.ipv4.conf.all.forwarding = 0
If "net.ipv4.conf.all.forwarding" is not set to "0" and is not documented with the information system security officer as an operational requirement or is missing, this is a finding.
Fix Text (F-85819r1167208_fix)
Configure RHEL 10 to not allow IPv4 packet forwarding unless the system is a router.
Create a configuration file if it does not already exist:
$ sudo vi /etc/sysctl.d/ipv4_forwarding.conf
Add the following line to the file:
net.ipv4.conf.all.forwarding = 0
Reload settings from all system configuration files with the following command:
$ sudo sysctl --system