Subscribe
Solaris Security – Disable ICMP Redirect in Sun Solaris
Posted on Dec 12, 2007 under Security, Solaris | 1 CommentTags:icmp-redirect ipv4 ipv6 nddconfig routing-table Security Solaris sun-solaris
Solaris Operating Environment by default is configured to both accept and send the ICMP Redirect messages. According to RFCs, only a router or a gateway device should send an ICMP Redirect message and any other hosts should only be able to receive the ICMP Redirects. If the Solaris server is not acting as a Router or a Gateway then sending ICMP Redirect message should be disabled. The same applies to accepting ICMP Redirect messages if the solaris server is not required to receive ICMP Redirect messages (say a single Router/Gateway network/subnets scenario) as a malicous hacker could send fake ICMP redirect messages to modify the routing table on the host and potentialy cause a Denial of Service attack.
