Using SmartDefense
FTP
This category allows you to configure various protections related to the FTP
protocol. It includes the following:
• FTP Bounce on page 245
• Block Known Ports on page 246
• Block Port Overflow on page 247
• Blocked FTP Commands on page 248
FTP Bounce
When connecting to an FTP server, the client sends a PORT command specifying
the IP address and port to which the FTP server should connect and send data. An
FTP Bounce attack is when an attacker sends a PORT command specifying the IP
address of a third
party instead of the attacker's own IP address. The FTP server
the
n sends data to the victim machine.
You can configure how FTP bounce attacks should be handled.
Chapter 9: Setting Your Security Policy
245