V-38532: The system must not accept ICMPv4 secure redirect packets by default. ------------------------------------------------------------------------------ Accepting "secure" ICMP redirects (from those gateways listed as default gateways) has few legitimate uses. It should be disabled unless it is absolutely required. Details: `V-38532 in STIG Viewer`_. .. _V-38532 in STIG Viewer: https://www.stigviewer.com/stig/red_hat_enterprise_linux_6/2015-05-26/finding/V-38532 Notes for deployers ~~~~~~~~~~~~~~~~~~~ .. include:: developer-notes/V-38532.rst