The firewall must block outbound IP packets that contain an illegitimate address in the source address field.

From Firewall Security Requirements Guide Requirements

Associated with: CCI-002403

SRG-NET-000364-FW-000037_rule The firewall must block outbound IP packets that contain an illegitimate address in the source address field.

Vulnerability discussion

If outbound communications traffic is not filtered, hostile activity intended to harm other networks or packets from networks destined to unauthorized networks may not be detected and prevented.

Check content

Review the configuration and verify the firewall blocks outbound IP packets that contain an illegitimate address in the source address field. If the firewall does not block outbound IP packets that contain an illegitimate address in the source address field, this is a finding.

Fix text

Configure the firewall to block outbound IP packets that contain an illegitimate address in the source address field.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.