beautypg.com

1 icmp vulnerability, 2 illegal commands (netbios and smtp), Figure 60 smurf attack – ZyXEL Communications 660HW Series User Manual

Page 136

background image

Prestige 660H/HW Series User’s Guide

135

Chapter 12 Firewalls

Figure 60 Smurf Attack

12.4.2.1 ICMP Vulnerability

ICMP is an error-reporting protocol that works in concert with IP. The following ICMP types
trigger an alert:

Table 37 ICMP Commands That Trigger Alerts

5

REDIRECT

13

TIMESTAMP_REQUEST

14

TIMESTAMP_REPLY

17

ADDRESS_MASK_REQUEST

18

ADDRESS_MASK_REPLY

12.4.2.2 Illegal Commands (NetBIOS and SMTP)

The only legal NetBIOS commands are the following - all others are illegal.

Table 38 Legal NetBIOS Commands

MESSAGE:

REQUEST:

POSITIVE:

VE:

RETARGET:

KEEPALIVE:

All SMTP commands are illegal except for those displayed in the following tables.

This manual is related to the following products: