- tcp-flags {
- (ack | no-ack);
- (fin | no-fin);
- (psh | no-psh);
- (r1 | no-r1);
- (r2 | no-r2);
- (rst | no-rst);
- (syn | no-syn);
- (urg | no-urg);
- }
- [edit security idp custom-attack attack-name attack-type signature protocol tcp]
Statement introduced in Release 9.3 of JUNOS software.
Specify that IDP looks for a pattern match whether or not the TCP flag is set.
This statement is supported on SRX-series devices.
ack | no-ack—When set, the acknowledgment flag acknowledges receipt of a packet.
fin | no-fin—When set, the final flag indicates that the packet transfer is complete and the connection can be closed.
psh | no-psh—When set, the push flag indicates that the receiver should push all data in the current sequence to the destination application (identified by the port number) without waiting for the remaining packets in the sequence.
r1 | no-r1—When set, indicates that the R1 retransmission threshold has been reached.
r2 | no-r2—When set, indicates that the R2 retransmission threshold has been reached.
rst | no-rst—When set, the reset flag resets the TCP connection, discarding all packets in an existing sequence.
syn | no-syn—When set, indicates that the sending device is asking for a three-way handshake to initialize communications.
urg | no-urg—When set, the urgent flag indicates that the packet data is urgent.
For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.