Command Reference Guide Global Configuration Mode Command Set61200990L1-35E Copyright © 2005 ADTRAN 376ip firewall check winnukeUse the ip firewall check winnuke command to enable the AOS stateful inspection firewall to discard allout of band (OOB) data (to protect against WinNuke attacks). Use the no form of this command to disablethis feature.Syntax DescriptionNo subcommands.Default ValuesAll AOS security features are disabled by default until the ip firewall command is issued at the GlobalConfiguration prompt. Issuing the ip firewall command enables the WinNuke check.Applicable PlatformsThis command applies to the NetVanta 300, 1000R, 2000, 3000, 4000, and 5000 and Total Access 900Series units.Command HistoryRelease 2.1 Command was introduced.Functional NotesWinNuke attack is a well-known denial of service attack on hosts running Microsoft Windows ® operatingsystems. An intruder sends out of band (OOB) data over an established connection to a Windows user.Windows cannot properly handle the OOB data and the host reacts unpredictably. Normal shut-down of thehosts will generally return all functionality. Using the ip firewall check winnuke command configures theAOS stateful inspection firewall to filter all OOB data to prevent network problems.Usage ExamplesThe following example enables the firewall to filter all OOB data:(config)#ip firewall check winnukeThe AOS security features must be enabled (using the ip firewall command) for the statefulinspection firewall to be activated.
