[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

Enabling Protection Against a Land Attack

Combining a SYN attack with IP spoofing, a land attack occurs when an attacker sends spoofed SYN packets containing the IP address of the victim as both the destination and source IP address.

Before You Begin

For background information, read Understanding Land Attacks.

You can use either J-Web or the CLI configuration editor to enable protection against a land attack.

This topic covers:

J-Web Configuration

To configure screens:

  1. Select Configure>CLI Tools>Point and Click CLI.
  2. Next to Security, click Configure or Edit.
  3. Next to Screen, click Configure.
  4. Next to Ids option, click Add new entry.
  5. In the Name box, type land.
  6. Next to Tcp, click Configure.
  7. Next to Land, select the check box and click OK.
  8. To save and commit the configuration, click Commit.

To configure zones:

  1. Select Configure>CLI Tools>Point and Click CLI.
  2. Next to Security, click Configure or Edit.
  3. Next to Zones, click Configure.
  4. Next to Security zone, click Add new entry.
  5. In the Name box, type zone.
  6. In the Screen box, type land and click OK.
  7. To save and commit the configuration, click Commit.

CLI Configuration

user@host# set security screen land tcp land
user@host# set security zones security-zone zone screen land

Related Topics

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]