MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)ID: oval:org.secpod.oval:def:8808 | Date: (C)2013-01-21 (M)2023-05-09 |
Class: COMPLIANCE | Family: windows |
The MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing) setting should be configured correctly.
This entry appears as MSS: (DisableIPSourceRouting) IPv6 source routing protection level (protects against packet spoofing) in the SCE. IP source routing is a mechanism that allows the sender to determine the IP route that a datagram should follow through the network.
Fix:
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)
(2) KEY: HKLM\System\CurrentControlSet\Services\Tcpip6\Parameters\DisableIPSourceRouting
Platform: |
Microsoft Windows Server 2008 R2 |