V-1-3 Dos Defense - Draytek Vigor2762 series User Manual

Adsl2/2+ and vdsl2 router
Hide thumbs Also See for Vigor2762 series:
Table of Contents

Advertisement

further defined. After that, in General Setup you may specify one set for call filter and one
set for data filter to execute first.

V-1-3 DoS Defense

V-1-3 DoS Defense
As a sub-functionality of IP Filter/Firewall, there are 15 types of detect/ defense function in
the DoS Defense setup. The DoS Defense functionality is disabled for default.
Click Firewall and click DoS Defense to open the setup page.
Available settings are explained as follows:
Item
Enable Dos Defense
Select All
Enable SYN flood defense
Enable UDP flood defense
248
Description
Check the box to activate the DoS Defense Functionality.
Click this button to select all the items listed below.
Check the box to activate the SYN flood defense function.
Once detecting the Threshold of the TCP SYN packets from
the Internet has exceeded the defined value, the Vigor
router will start to randomly discard the subsequent TCP
SYN packets for a period defined in Timeout. The goal for
this is prevent the TCP SYN packets' attempt to exhaust
the limited-resource of Vigor router.
By default, the threshold and timeout values are set to
2000 packets per second and 10 seconds, respectively.
That means, when 2000 packets per second received, they
will be regarded as "attack event" and the session will be
paused for 10 seconds.
Check the box to activate the UDP flood defense function.
Once detecting the Threshold of the UDP packets from the
Internet has exceeded the defined value, the Vigor router
will start to randomly discard the subsequent UDP packets
Vigor2762 Series User's Guide

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents