land-attack-check (IDS MS-MPC)
Syntax
land-attack-check (ip-only | ip-port);
Hierarchy Level
[edit services ids rule rule-name term term-name then]
Description
Identify and drop SYN packets that have the same source and destination address or port, which provides protection against land attacks. This statement can only be used in IDS rules assigned to a service set on an MS-MPC.
Options
| ip-only | Identify and drop SYN packets that have the same source and destination address. |
| ip-port | Identify and drop SYN packets that have the same source and destination address and port. |
Required Privilege Level
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 17.1.