mediumnetworkverified ✓rollback-safe
Ensure net.ipv4.conf.all.rp_filter is set to 1
sysctl-net-ipv4-conf-all-rp-filter · RHEL ≥ 8 · 1 impl
Description
The kernel parameter net.ipv4.conf.all.rp_filter must be set to 1 to enforce this network/kernel security control.
Rationale
Improper network kernel parameters can allow network-based attacks including packet redirection, source routing, and denial of service.
Check → Remediate
Checksysctl_value
- key:
- net.ipv4.conf.all.rp_filter
- expected:
- 1
Remediatesysctl_set
- key:
- net.ipv4.conf.all.rp_filter
- value:
- 1
Framework references
CIS
rhel9 3.3.7rhel8 3.3.1.12rhel10 3.3.1.12
STIG
V-281345 / RHEL-10-800130V-230549 / RHEL-08-040285V-257962 / RHEL-09-253035
Live verification
rhel10:checkrhel8:checkrhel9:check
#sysctl#networking#hardening