Using SmartDefense
FTP
This category allows you to configure various protections related to the FTP
protocol. It includes the following:
•
FTP Bounce
on page 245
•
Block Known Ports
on page 246
•
Block Port Overflow
on page 247
•
Blocked FTP Commands
on page 248
FTP Bounce
When connecting to an FTP server, the client sends a PORT command specifying
the IP address and port to which the FTP server should connect and send data. An
FTP Bounce attack is when an attacker sends a PORT command specifying the IP
party instead of the attacker's own IP address. The FTP server
the
You can configure how FTP bounce attacks should be handled.
address of a third
n sends data to the victim machine.
Chapter 9: Setting Your Security Policy
245
