Filter and Firewall
Left running head:
Chapter name (automatic)
718
Beta Beta
OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide
Alcatel-Lucent
ICMP-ROUTER-ADVERTISEMENT
icmp-router-advertisement
DESCRIPTION
This command is entered in the Firewall-Attack Sub Configuration Mode.
Remote attackers can spoof these ICMP packets and remotely add bad default-
route entries into a victims routing table. Since the victims’ systems would be
forwarding the frames to the wrong address, it would be unable to reach other
networks.
PARAMETERS
None.
EXAMPLE
ALU(config-firewall-attack-A1)# icmp-router-advertisement
ICMP-SMURF-ATTACK
icmp-smurf-attack
DESCRIPTION
This command is entered in the Firewall-Attack Sub Configuration Mode.
An assault on a network that floods it with excessive messages in order to impede
normal traffic. It is accomplished by sending ping requests (ICMP echo requests)
to a broadcast address on the target network or an intermediate network. The
return address is spoofed to the victim's address. Since a broadcast address is
picked up by all nodes on the subnet, it functions like an amplifier, generating
hundreds of responses from one request and eventually causing a traffic
overload.
PARAMETERS
None.
EXAMPLE
ALU(config-firewall-attack-A1)# icmp-smurf-attack