Setup Anti-Dos - D-Link DFL-900 User Manual

DFL-900/1500 User Manual
Log Message
6 2004-11-30 10:50:18
192.168.17.173,4161
140.112.1.1,1863 TCP LAN2 WAN1
BLOCK Block-MSN
7 2004-11-30 10:50:59
192.168.17.173:4199
140.116.5.8:80 TCP/(HTTP) LAN2
WAN1 Forward AllowHTTP

10.4.2 Setup Anti-DoS

Step 1. Setup Anti-DoS
With the Anti-DoS attacks protection
enabled, the DFL-1500 will be equipped with the
built-in Anti-DoS engine. Normal DoS attacks will
show up in the log when detecting and blocking
such traffic. However, Flooding attacks require
extra parameters to recognize. Check the
Enable DoS attacks protection checkbox.
And change the value of flooding thresholds as
your preference.
FIELD
Enable DoS attacks protection
The firewall log is number 6. At the specified time (
the firewall
blocked
(
192.168.17.173:4161
(
140.112.1.1:1863
from LAN2 to WAN1 in this log. The packet matched the firewall rule
(Block-MSN) and then blocked it out according to the rule's configuration.
The firewall log is number 7. At the specified time (
the firewall
forwarded
(
192.168.17.173:4199
(
140.116.5.8:80
is from LAN2 to WAN1 in this log. The packet matched the firewall rule
(AllowHTTP) and then forwarded it out according to the rule's
configuration.
Table 10-5 Firewall Log examples
ADVANCED SETTINGS > Firewall > Anti-DoS
DESCRIPTION
Enable the Denial of Service (DoS) attack protection. You
should enable this to activate any further settings.
Notice, the Anti-DoS feature can detect the TCP/UDP/ICMP
flooding on each interface of the firewall device.
95
Description
the packet which came from source IP address/port
) to the destination
) using TCP protocol. The direction of packet flow is
the packet which came from source IP address/port
) to the destination
) using TCP(HTTP) protocol. The direction of packet flow
Chapter 10
Firewall
),
2004-11-30 10:50:18
IP address/port
),
2004-11-30 10:50:59
IP address/port
EXAMPLE
Enabled