LAND Attack

[dzimmi]

Hi Folks,

I try to launch a LAND Attack against my firewall ASA 5520. Everything will work fine. But why, I think it shoud not work.

I use a little tool where I can user a spoofed address, with a cluster shell and attack the firewall interface with the source of 127.0.0.1 ore the ip address of the interface as the source and destination. Then I get a cpu load of 89% with only two host. With IP tables I can use kernel processes to prevent this. But I don´t find anything for ASA

[Ramraj Sivagnanam Sivajanam]

Hi Bro

LAND ATTACK is old news. I’m not surprise if your Cisco ASA is able to handle LAND ATTACKS well, which is a good news. The Cisco ASA receives a packet with the IP source address 127.0.0.1.

There’s a another case on this, for your kind reference https://supportforums.cisco.com/thread/226294