Draytek Vigor 110 User Manual page 44

Block Land
Block Unknown
Protocol
Warning Messages
40
Check the box to enforce the Vigor router to defense the Land
attacks. The Land attack combines the SYN attack technology with
IP spoofing. A Land attack occurs when an attacker sends spoofed
SYN packets with the identical source and destination addresses, as
well as the port number to victims.
Check the box to activate the Block Unknown Protocol function.
Individual IP packet has a protocol field in the datagram header to
indicate the protocol type running over the upper layer. However,
the protocol types greater than 100 are reserved and undefined at
this time. Therefore, the router should have ability to detect and
reject this kind of packets.
We provide Syslog function for user to retrieve message from Vigor
router. The user, as a Syslog Server, shall receive the report sending
from Vigor router which is a Syslog Client. (Refer to Chapter 13
System Maintenance Syslog Access Setup for detail information.)
All the warning messages related to DoS defense will be sent to user
and user can review it through Syslog daemon. Look for the keyword
DoS in the message, followed by a name to indicate what kind of
attacks is detected.
Vigor110 User's Guide