Hi, This is not the same as Local Interface spoofing. local interface spoofing error is given by firewall when it finds a packet coming from external interface but have a source address of internal pool like 192.168.series.
same is true for other interfaces of firewall. A Land Attack is an attempt to slow down a computer or network connection. In a Land Attack, a packet is sent with identical source and destination IP addresses which match an IP address of a computer on the network. Because this is theoretically impossible, Windows goes into an infinite loop trying to resolve these illegal connections, causing the whole network performance to be degraded. check point's smart defense feature can detect this and stop the packet. Sorry for the second question I don't know about how to trace the real IP from a spoofed one. Regards Chandra Prakash Quoting Kingsley Chu <[EMAIL PROTECTED]>: > Is it same as "Local Interface Spoofing" in SmartDefense? > Can I identify the attack come from which source? > > -----Original Message----- > From: Mailing list for discussion of Firewall-1 > [mailto:[EMAIL PROTECTED] Behalf Of Chandra > Prakash > Sent: Monday, May 03, 2004 1:00 PM > To: [EMAIL PROTECTED] > Subject: Re: [FW-1] What is LAND attack? > > > Hi, > A LAND attack is when a SYN packet is sent with the same source IP > address > and port no. (spoofed)as of destination. > > this can be done with a tool like Hping or a script which you can > download > from Internet. > > Regards > Chandra Prakash > CISSP. MCSE, CCNA, CCSA > > > Quoting Kingsley Chu <[EMAIL PROTECTED]>: > > > What is LAND attack? > > > > ================================================= > > To set vacation, Out-Of-Office, or away messages, > > send an email to [EMAIL PROTECTED] > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your > > subscription options, email > > [EMAIL PROTECTED] > > ================================================= > > > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
