Table of Contents
Advertisement
Command Reference Guide
Invalid IPv4 Traffic Pattern
Land Attack
Broadcast Source IP
Invalid TCP Initiation
Requests
Invalid TCP Segment Number No
IP Source Route Option
Application-Specific Processing
The following applications and protocols require special processing to operate concurrently with IPv4
NAT/firewall functionality. The AOS IPv4 firewall includes ALGs for handling these applications and
protocols:
AOL Instant Messenger (AIM®)
VPN ALGS: ESP and IKE
FTP
H.323: H.245 Q.931 ASN1 PER decoding and Encoding
ICQ®
IRC
Microsoft® Games
Net2Phone
PPTP
Quake®
Real-Time Streaming Protocol
SMTP
HTTP
CUseeme
SIP
L2TP
PcAnywhere™
SQL
Microsoft Gaming Zone
To determine if a specific application requires special processing, contact ADTRAN technical support at
.
www.adtran.com
60000CRG0-35E
Manually
AOS Firewall Response
Enabled?
No
Any packets with the same source and
destination IP addresses are discarded.
No
Packets with a broadcast source IP
address are discarded.
No
TCP SYN packets that have ack, urg rst,
or fin flags set are discarded.
The sequence numbers for every active
TCP session are maintained in the firewall
session database. If the firewall received a
segment with an unexpected (or invalid)
sequence number, the packet is dropped.
No
All IP packets containing the IP source
route option are dropped.
Copyright © 2012 ADTRAN, Inc.
Global Configuration Mode Command Set
Common
Attacks
Land Attack
1003
Advertisement
Table of Contents
