D-Link NetDefendOS User Manual page 852

Chapter 13: Advanced Settings
IP router alert option
How to handle IP packets with contained route alert.
Default: ValidateLogBad
IP Options Other
All options other than those specified above.
Default: DropLog
Directed Broadcasts
Indicates whether NetDefendOS will forward packets which are directed to the broadcast
address of its directly connected networks. It is possible to achieve this functionality by adding
lines to the Rules section, but it is also included here for simplicity's sake. This form of validation
is faster than entries in the Rules section since it is more specialized.
Default: DropLog
IP Reserved Flag
Indicates what NetDefendOS will do if there is data in the "reserved" fields of IP headers. In
normal circumstances, these fields should read 0. Used by OS Fingerprinting.
Default: DropLog
Strip DontFragment
Strip the Don't Fragment flag for packets equal to or smaller than the size specified by this
setting.
Default: 65535 bytes
Multicast Mismatch option
What action to take when Ethernet and IP multicast addresses does not match.
Default: DropLog
Min Broadcast TTL option
The shortest IP broadcast Time-To-Live value accepted on receipt.
Default: 1
Low Broadcast TTL Action option
What action to take on too low broadcast TTL values.
Default: DropLog
852