–
TCP Flag SYN set and Source Port < 1024 or TCP Control Flags = 0
and
–
TCP Sequence Number = 0 or TCP Flags FIN, URG, and PSH set
and
–
TCP Sequence Number = 0 or TCP Flags SYN and FIN set.
•
TCP Offset:
–
Checks for TCP header offset =1.
•
TCP SYN:
–
TCP Flag SYN set.
•
TCP SYN & FIN:
–
TCP Flags SYN and FIN set.
•
TCP FIN & URG & PSH:
–
TCP Flags FIN and URG and PSH set and TCP Sequence Number =
0.
•
ICMP V6:
–
Limiting the size of ICMPv6 Ping packets.
•
ICMP Fragment:
–
Checks for fragmented ICMP packets.
Commands in this Chapter
This chapter explains the following commands:
dos-control firstfrag
dos-control icmp
dos-control l4port
dos-control sipdip
dos-control tcpflag
dos-control tcpfrag
ip icmp echo-reply
1362
Denial of Service Commands
ip icmp error-interval
ip unreachables
ip redirects
ipv6 icmp error-interval
ipv6 unreachables
show dos-control