Network Attacks - An Overview
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
745
Alcatel-Lucent
Beta Beta
OmniAccess 5740 Unified Services Gateway CLI Configuration Guide
TCP
-FIN-NO-ACK
tcp-fin-no-ack
TCP packets without ACK set for FIN.This leads to system crashing at times. To
avoid this mishap, the above command is also present in the default DoS
prevention list.
TCP-FIN-SCAN
tcp-fin-scan
TCP FIN flooding. To secure system from this kind of flooding, this command also
forms a part of the default list.
TCP-HEADER-FRAG
tcp-header-frag
In this attack, a TCP header is split into multiple frames in an attempt to bypass
firewalls or intrusion detection systems. This could lead to secure information also
being passed through the filter. To retain security, this command is included in the
DoS prevention list.
TCP-INVALID-URGENT-OFFSET
tcp-invalid-urgent-offset
The intruder sends a TCP frame with an Urgent pointer which points past the end
of the data. This may cause some TCP/IP implementations to become unstable or
crash. Some TCP/IP implementations will hang when receiving many such
frames. Inclusion of this command avoids such attacks.
TCP-NULL-SCAN
tcp-null-scan
TCP packets w/o any flag set. Leads to inability to scan such packets. This attack
is avoided since it is also included in the default DoS prevention list.
TCP-SYN-FIN
tcp-syn-fin
This has TCP packets with both SYN and FIN flag set, causing a denial of service.
This attack is prevented by using the “default” keyword or can be inserted in the
user-defined list.
To Next Page
Loading...
Need help?
General
