Re: Cisco PIX fixup protocol command

From: erisk (erisk_at_iinet.net.au)
Date: 02/13/04

  • Next message: Sistemas Aurensis-Sys Sec: "How to secure access to private network files via IIS 6.0?" 
    To: "erisk" <erisk@iinet.net.au>, "S.Rohit" <s.rohit@usa.net>, <security-basics@securityfocus.com>
Date: Fri, 13 Feb 2004 10:24:35 +0800

    sorry corretion "even when port is not in use.."***

    ----- Original Message -----
    From: "erisk" <erisk@iinet.net.au>
    To: "S.Rohit" <s.rohit@usa.net>; <security-basics@securityfocus.com>
    Sent: Friday, February 13, 2004 10:22 AM
    Subject: Re: Cisco PIX fixup protocol command

    > if the protocols are not in use then disbale the fixups (ie the ones that
    > are defualt upon install of the PIX). I have found instances where
    > nmap/superscan can pick up the fixups enabled even ***
    > The implication here is that it can give an indication that a PIX is in
    use.
    >
    > If the protocols are used however (SMTP, FTP, DNS) "fixup" those.. It
    > provides attack guards over the protocols and inspects the traffic for the
    > connections.
    > ----- Original Message -----
    > From: "S.Rohit" <s.rohit@usa.net>
    > To: <security-basics@securityfocus.com>
    > Sent: Wednesday, February 11, 2004 6:52 PM
    > Subject: Cisco PIX fixup protocol command
    >
    >
    > hi everyone....
    >
    > might sound like a very stupid question to ask, but i am looking for
    info
    > on wat is the use of fixup protocol commands on the Cisco PIX device. wat
    is
    > the exact usage and significance of this commands? and wat are the
    security
    > implications of this command? i know that some fixup's like say fixup
    > protocol
    > smtp are good cos of the way they restrict the SMTP command set but how
    > about
    > the general syntax [no] fixup protocol [service] [port]? what is this used
    > for
    > and wat are the security implications for this?
    >
    > i am asking this because i'm seeing a recommendation in some PIX
    > hardening
    > guide to disable fixups or they flag fixups as a security issue? y is tat?
    >
    > rohit
    >
    >
    >
    > --------------------------------------------------------------------------
    -
    > Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection
    >
    > Protect your network with the comprehensive security solution that
    > integrates six applications for ease of use and lower TCO.
    >
    > Firewall - Virus protection - Spam protection - URL blocking - VPN
    > - Wireless security.
    >
    > Download 30-day evaluation at:
    > http://www.astaro.com/php/contact/securityfocus.php
    > -------------------------------------------------------------------------- 

    --
>
>
---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection
Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.
Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.
Download 30-day evaluation at:
http://www.astaro.com/php/contact/securityfocus.php
----------------------------------------------------------------------------
  • Next message: Sistemas Aurensis-Sys Sec: "How to secure access to private network files via IIS 6.0?"

    Relevant Pages

    • RE: Cisco PIX fixup protocol command
      ... Cisco PIX fixup protocol command ... on wat is the use of fixup protocol commands on the Cisco PIX device. ... and wat are the security implications for this? ... Astaro Security Linux -- firewall with Spam/Virus Protection ...
      (Security-Basics)
    • [NEWS] Multiple Vulnerabilities in Cisco PIX and ASA Appliances
      ... Get your security news from a reliable source. ... Multiple vulnerabilities are found in Cisco PIX 500 Series Security ... Enhanced inspection of Malformed Hypertext Transfer Protocol ... this vulnerability. ...
      (Securiteam)
    • RE: Cisco PIX fixup protocol command
      ... Radio Netherlands, the dutch international service ... Cisco PIX fixup protocol command ... on wat is the use of fixup protocol commands on the Cisco PIX device. ... and wat are the security implications for this? ...
      (Security-Basics)
    • RE: RE: Security for new small company
      ... Security for new small company ... >> You could buy Watchguard or Cisco PIX. ... helpful shopping tools and great gift ideas. ... personal Netscape Mail account today at ...
      (Security-Basics)
    • Re: Cisco PIX 515 Firewall
      ... Subject: Cisco PIX 515 Firewall ... Cisco PIX uses the ASA (adaptive security algorithm) which is basically ... Velly Velly nice firewall to work on. ... > keep-state tables to auto-pass the rest of the packets in the session. ...
      (Security-Basics)
    • Quantcast