Table of Contents
Advertisement
DoS Defense
Enable SYN Flood Defense Activates the SYN flood defense function. If the amount of
Enable UDP Flood Defense Activates the UDP flood defense function. If the amount of
Enable ICMP Flood
Defense
Enable Port Scan Detection Activates the Port Scan detection function. Port scan sends
Enable Block IP Options
Enable Block Land
Vigor3300V+ Series User's Guide
Enables or disables the DoS Defense function. The default
value is Disable.
TCP SYN packets from the Internet exceeds the user-defined
threshold value, the router will be forced to randomly discard
the subsequent TCP SYN packets within the user-defined
timeout period. The default setting for threshold and timeout
are 300 packets per second and 10 seconds, respectively.
UDP packets from the Internet exceeds the user-defined
threshold value, the router will be forced to randomly discard
the subsequent UDP packets within the user-defined timeout
period. The default setting for threshold and timeout are 300
packets per second and 10 seconds, respectively.
Activates the ICMP flood defense function. If the amount of
ICMP echo requests from the Internet exceeds the
user-defined threshold value, the router will discard the
subsequent echo requests within the user-defined timeout
period. The default setting for threshold and timeout are 300
packets per second and 10 seconds, respectively.
packets with different port numbers to find available services,
which respond. The router will identify it and report a warning
message if the port scanning rate in packets per second
exceeds the user-defined threshold value. The default
threshold is 300 pps (packets per second).
Activates the Block IP options function. The router will ignore
any IP packets with IP option field appearing in the datagram
header.
Activates the Block Land function. A Land attack occurs
when an attacker sends spoofed SYN packets with
identical source address, destination addresses and port
number as those of the victim.
147
Advertisement
Table of Contents
