Vlansettings - D-Link NetDefend DFL-210 Cli Reference Manual

Network security firewall
Hide thumbs Also See for NetDefend DFL-210:
Table of Contents

Advertisement

3.39.19. VLANSettings

TCPSynUrg
TCPSynPsh
TCPSynRst
TCPSynFin
TCPFinUrg
TCPUrg
TCPECN
TCPRF
TCPNULL
3.39.19. VLANSettings
Description
Settings for IEEE 802.1Q based Virtual LAN interfaces.
Properties
UnknownVLANTags
The TCP URG flag together with SYN; normally invalid (strip=strip
URG). (Default: DropLog)
The TCP PSH flag together with SYN; normally invalid but always
used by some IP stacks (strip=strip PSH). (Default: StripSilent)
The TCP RST flag together with SYN; normally invalid (strip=strip
RST). (Default: DropLog)
The TCP FIN flag together with SYN; normally invalid (strip=strip
FIN). (Default: DropLog)
The TCP URG flag together with FIN; normally invalid (strip=strip
URG). (Default: DropLog)
The TCP URG flag; many operating systems cannot handle this cor-
rectly. (Default: StripLog)
The Explicit Congestion Notification (ECN) flags. Previously known
as "XMAS"/"YMAS" flags. Also used in OS fingerprinting. (Default:
StripLog)
The TCP Reserved field: should be zero. Used in OS fingerprinting.
Also part of ECN extension. (Default: StripLog)
TCP "NULL" packets without SYN, ACK, FIN or RST; normally in-
valid, used by scanners. (Default: DropLog)
Note
This object type does not have am identifier and is identified by the name of the type
only. There can only be one instance of this type.
VLAN packets tagged with an unknown ID. (Default: DropLog)
Note
This object type does not have am identifier and is identified by the name of the type
only. There can only be one instance of this type.
Chapter 3. Configuration Reference
137

Advertisement

Table of Contents
loading

Table of Contents