HP 7000 dl Router Series Guida Utente Scaricare il pdf (Pagina 275)

SROS Command Line Interface Reference Guide Global Configuration Mode Command Set

Attacks that send TCP URG

Yes Any TCP packets that have the URG flag set

are discarded by the firewall.

Winnuke, TCP

Falsified IP Header Attacks No The firewall verifies that the packet’s actual

length matches the length indicated in the IP

header. If it does not, the packet is dropped.

Echo No All UDP echo packets are discarded by the

Land Attack No Any packets with the same source and

destination IP addresses are discarded.

Broadcast Source IP No Packets with a broadcast source IP address

are discarded.

Invalid TCP Initiation Requests No TCP SYN packets that have ack, urg rst, or

fin flags set are discarded.

Invalid TCP Segment Number No The sequence numbers for every active TCP

session are maintained in the firewall

session database. If the firewall received a

segment with an unexpected (or invalid)

sequence number, the packet is dropped.

IP Source Route Option No All IP packets containing the IP source route

option are dropped.

Invalid Traffic Pattern Manually

OS Firewall Response Common

Nessun commento

HP 7000 dl Router Series Guida Utente Pagina 275