LAND Attack on my Pix !!!

Unanswered Question
Jan 11th, 2008

Hi all,

Today when i saw my syslog i found a lots of strange and similar log mssg on my pix 525 (v7.29(1)) the error mssg is attached however i changed a little details in that jst for security reasons.

LAND attacks seems to happen when a spoofed packet with the SYN flag set comes from a host, with Source ip/port is same as Destination ip/port.

This is highly unlikely in my environment as we have another internal firewall and machines are properly patched.

This PAT config is wht i found on my PIX:-

FW525# sh run | inc PAT_Some_Project name 144.X.Y.Z PAT_Some_Project

global (Outside) 9 PAT_Some_Project netmask


The netmask shud be /32 I think.

Any suggestions wht is happening here.



I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)


This Discussion