Motorola AP-7131 Product Reference Manual page 244

6-28 AP-7131 Access Point Product Reference Guide
NAT Timeout
4. Refer to the
SYN Flood Attack
Check
Source Routing
Check
Winnuke Attack
Check
FTP Bounce Attack
Check
IP Unaligned
Timestamp Check
Sequence Number
Prediction Check
Mime Flood Attack
Check
Max Header Length
(>=256)
Max Headers
(>=12)
5. Click Apply
without clicking the Apply button results in all changes to the screens being lost.
6. Click Undo Changes
settings displayed on the Firewall screen to the last saved configuration.
Network Address Translation (NAT) converts an IP address in one
network to a different IP address or set of IP addresses in a
different network. Set a
access point
if no translation activity is detected after the specified interval.
Configurable Firewall Filters
A SYN flood attack requests a connection and then fails to
promptly acknowledge a destination host's response, leaving the
destination host vulnerable to a flood of connection requests.
A source routing attack specifies an exact route for a packet's
travel through a network, while exploiting the use of an
intermediate host to gain access to a private host.
A "Win-nuking" attack uses the IP address of a destination host to
send junk packets to its receiving port.
An FTP bounce attack uses the PORT command in FTP mode to gain
access to arbitrary ports on machines other than the originating
client.
An IP unaligned timestamp attack uses a frame with the IP
timestamp option, where the timestamp is not aligned on a 32-bit
boundary.
A sequence number prediction attack establishes a three-way TCP
connection with a forged source address. The attacker guesses the
sequence number of the destination host response.
A MIME flood attack uses an improperly formatted MIME header
in "sendmail" to cause a buffer overflow on the destination host.
Use the Max Header Length
header length (at least 256 bytes).
Use the Max Headers
headers allowed (at least 12 headers).
to save any changes to the Firewall screen. Navigating away from the screen
(if necessary) to undo any changes made. Undo Changes reverts the
NAT Timeout
uses to terminate the IP address translation process
field to set the following firewall filters:
field to set the maximum allowable
field to set the maximum number of
interval (in minutes) the