RE: Cisco PIX fixup protocol command

["Rosenhan, David" <David.Rosenhan () swiftbrands com>]

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/co
nfig/fixup.htm#1078381


David Rosenhan, CCNP
Information Technology
Swift & Company
1770 Promontory Circle
Greeley, CO  80634
970-506-8045
 

-----Original Message-----
From: S.Rohit [mailto:s.rohit () usa net] 
Sent: Wednesday, February 11, 2004 3:53 AM
To: security-basics () securityfocus com
Subject: Cisco PIX fixup protocol command

hi everyone....

   might sound like a very stupid question to ask, but i am looking for
info
on wat is the use of fixup protocol commands on the Cisco PIX device.
wat is
the exact usage and significance of this commands? and wat are the
security
implications of this command? i know that some fixup's like say fixup
protocol
smtp are good cos of the way they restrict the SMTP command set but how
about
the general syntax [no] fixup protocol [service] [port]? what is this
used for
and wat are the security implications for this?

   i am asking this because i'm seeing a recommendation in some PIX
hardening
guide to disable fixups or they flag fixups as a security issue? y is
tat? 

rohit



------------------------------------------------------------------------
---
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.

Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.

Download 30-day evaluation at:
http://www.astaro.com/php/contact/securityfocus.php
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.

Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.

Download 30-day evaluation at:
http://www.astaro.com/php/contact/securityfocus.php
----------------------------------------------------------------------------