Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

LAND Attack on my Pix !!!

Hi all,

Today when i saw my syslog i found a lots of strange and similar log mssg on my pix 525 (v7.29(1)) the error mssg is attached however i changed a little details in that jst for security reasons.

LAND attacks seems to happen when a spoofed packet with the SYN flag set comes from a host, with Source ip/port is same as Destination ip/port.

This is highly unlikely in my environment as we have another internal firewall and machines are properly patched.

This PAT config is wht i found on my PIX:-

FW525# sh run | inc PAT_Some_Project name 144.X.Y.Z PAT_Some_Project

global (Outside) 9 PAT_Some_Project netmask 255.255.0.0

FW525#

The netmask shud be /32 I think.

Any suggestions wht is happening here.

regards

Kunal

1 REPLY
Community Member

Re: LAND Attack on my Pix !!!

Senior Members any comments ??

regrds

Kunal

121
Views
0
Helpful
1
Replies
CreatePlease to create content