P-2602H(W)(L)-DxA Series User’s Guide

Figure 101 Smurf Attack

13.4.2.1 ICMP Vulnerability

ICMP is an error-reporting protocol that works in concert with IP. The following ICMP types trigger an alert:

Table 67 ICMP Commands That Trigger Alerts

5

13

14

17

18

REDIRECT

TIMESTAMP_REQUEST

TIMESTAMP_REPLY

ADDRESS_MASK_REQUEST

ADDRESS_MASK_REPLY

13.4.2.2 Illegal Commands (NetBIOS and SMTP)

The only legal NetBIOS commands are the following - all others are illegal.

Table 68 Legal NetBIOS Commands

MESSAGE:

REQUEST:

POSITIVE:

VE:

RETARGET:

KEEPALIVE:

All SMTP commands are illegal except for those displayed in the following tables.

Table 69 Legal SMTP Commands

AUTH

DATA

EHLO

ETRN

EXPN

HELO

HELP

MAIL

NOOP

 

 

 

 

 

 

 

 

 

QUIT

RCPT

RSET

SAML

SEND

SOML

TURN

VRFY

 

 

 

 

 

 

 

 

 

 

186

Chapter 13 Firewalls

Page 186
Image 186
ZyXEL Communications P-2602 manual Icmp Vulnerability, Illegal Commands NetBIOS and Smtp