Hi,
I have posted this to the list on the 6th of September .....
It is CPMAD that tell you it sees a land attack. Check the
cpmad_config.conf
file (in $FWDIR/conf) and you should find line containing _land_attck_ in
it.
A land attack sends out just one SYN packet in which the sending device
IP
address has been replaced with the address of the destination, meaning that
it
tries to answer to it's own, resulting in loop backed packets ... slowing
down
the server.
Met vriendelijke groeten - Bien ? vous - Kind regards
Guy ROELANDTS
EMEA GS Internet Expertise Centre - CCSA & CCSE
Compaq Software Engineer - Belgium
E-mail : [EMAIL PROTECTED]
Tel: +32(02)729.77.44 (options 3 - 3 - 1)
Fax: +32(02)729.77.65
=====================================================================
This message may contain confidential and/or proprietary information,
and is intended only for the person/entity to whom it was originally
addressed. The content of this message may contain private views and
opinions which do not constitute a formal disclosure or commitment
unless specifically stated. Should you receive this message by mistake
please inform the sender immediately.
=====================================================================
-----Original Message-----
From: Worapoj Ruttanabunjerdkul [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 07, 2001 1:19 PM
To: [EMAIL PROTECTED]
Subject: [FW1] Land_Attack - need help
Dear All,
I have found this alert, "attack=land_attack", in log. I would like to know
what does it mean and how to block it? I am using FW-1 4.1 SP4 on Windows NT
4.0.
Best Regards,
Worapoj R.
E-Mail: [EMAIL PROTECTED]
============================================================================
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
============================================================================
====
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
