User's Manual Part 2

Using SmartDefense
Chapter 9: Setting Your Security Policy 247
FTP
This category allows you to configure various protections related to the FTP
protocol. It includes the following:
• FTP Bounce on page 247
• Block Known Ports on page 248
• Block Port Overflow on page 249
• Blocked FTP Commands on page 250
FTP Bounce
When connecting to an FTP server, the client sends a PORT command specifying
the IP address and port to which the FTP server should connect and send data. An
FTP Bounce attack is when an attacker sends a PORT command specifying the IP
address of a third party instead of the attacker's own IP address. The FTP server
then sends data to the victim machine.
You can configure how FTP bounce attacks should be handled.