Skip to content

Latest commit

 

History

History
30 lines (26 loc) · 2.92 KB

ip-forwarding-disabled.md

File metadata and controls

30 lines (26 loc) · 2.92 KB
Raw

CloudSploit

GOOGLE / Compute / IP Forwarding Disabled

Quick Info
Plugin Title IP Forwarding Disabled
Cloud GOOGLE
Category Compute
Description Ensures that IP forwarding is disabled on all instances
More Info Disabling IP forwarding ensures that the instance only sends and receives packets with matching destination or source IPs.
GOOGLE Link https://cloud.google.com/vpc/docs/using-routes
Recommended Action IP forwarding settings can only be chosen when creating a new instance. Delete the affected instances and redeploy with IP forwarding disabled.

Detailed Remediation Steps

  1. Log into the Google Cloud Platform Console.
  2. Scroll down the left navigation panel and choose the "Compute Engine" to select the "VM Instances" option.
  3. On the "VM Instances" page, select the VM instance which needs to be verified.
  4. On the "VM instance details" page, scroll down and check "IP forwarding" under the "Network Interfaces" is enabled or not for VM instances.
  5. Repeat steps number 2 - 4 to verify other VM instances in the network.
  6. Navigate to "Compute Engine", choose the "VM instances" and select the "VM instance" which needs to disabled "IP forwarding" for VM instance.
  7. On the "VM instance details" page, select the "CREATE SIMILAR" button at the top.
  8. Enter the "Name" of the instance, Region, Choose the "Machine Configuration" as per the previous instance had.
  9. Scroll down the "Create an Instance" page, click on the "Management, security, disks, networking, sole tenancy" option, choose "Networking" and click on the pencil icon next to the "default" under "Network Interfaces."
  10. On the "Network Interfaces" tab, scroll down the page and select "OFF" from the dropdown menu under the "IP Forwarding" option.
  11. Click on the "Create" button at the bottom to make the changes.
  12. Once the new similar instance is up and running, delete the instance with "IP forwarding" enabled.
  13. Repeat steps number 6 - 12 so that IP forwarding settings can only be chosen when creating a new instance. Delete the affected instances and redeploy with IP forwarding disabled.