ADTRAN 1000R Series User Manual

Page 417

Command Reference Guide

Global Configuration Mode Command Set

61200510L1-35E

417

Attacks that send TCP URG
packets

Yes

Any TCP packets that have the URG flag set
are discarded by the firewall.

Winnuke, TCP
XMAS Scan

Falsified IP Header Attacks

The firewall verifies that the packet’s actual
length matches the length indicated in the IP
header. If it does not, the packet is dropped.

Jolt/Jolt2

Echo

All UDP echo packets are discarded by the
firewall.

Char Gen

Land Attack

Any packets with the same source and
destination IP addresses are discarded.

Land Attack

Broadcast Source IP

Packets with a broadcast source IP address
are discarded.

Invalid TCP Initiation Requests

TCP SYN packets that have ack, urg rst, or
fin flags set are discarded.

Invalid TCP Segment Number

The sequence numbers for every active TCP
session are maintained in the firewall
session database. If the firewall received a
segment with an unexpected (or invalid)
sequence number, the packet is dropped.

IP Source Route Option

All IP packets containing the IP source route
option are dropped.

Invalid Traffic Pattern

Manually
Enabled?

AOS Firewall Response

Common
Attacks