Defense Against Dos Attacks; Table 2.1 Dos Attacks - Asus iPBX30 User Manual

Chapter 2

2.3.2.3 Defense against DoS Attacks

The iPBX30 Firewall has an Attack Defense Engine that protects
internal networks from known types of Internet attacks. It provides
automatic protection from Denial of Service (DoS) attacks such
as SYN flooding, IP smurfing, LAND, Ping of Death and all re-
assembly attacks. For example, the iPBX30 Firewall provides
protection from "WinNuke", a widely used program to remotely
crash unprotected Windows systems in the Internet. The iPBX30
Firewall also provides protection from a variety of common Internet
attacks such as IP Spoofing, Ping of Death, Land Attack, and
Reassembly attacks.
The type of attack protections provided by the iPBX30 is listed in
the table below.
Type of Attack
Re-assembly Attacks
ICMP Attacks
Flooders
Port Scans
Protection with PF Rules
Miscellaneous Attacks
6
Table 2.1. DoS Attacks
Name of Attacks
Bonk, Boink, Teardrop ( New Tear),
Overdrop, Opentear, Syndrop, Jolt,
IP fragmentation overlap
Ping of Death, Smurf, Twinge
Logging only for ICMP Flooder, UDP
Flooder, SYN Flooder
Logging only for TCP SYN Scan,
Attacking packets dropped: TCP
XMAS Scan, TCP Null Scan, TCP
Stealth Scan
Echo-Chargen, Ascend Kill
IP Spoofing, LAND, Targa, Winnuke
iPBX30 User Manual