Appendix; Feature Priority Table; Firewall; Firewall Feature List - D-Link DVX-1000 User Manual

22 Appendix

22.1 Feature Priority Table

Priority Feature
Highest
Do Not Disturb –Forward to Voicemail
Call Forward – Always
Follow Me – Call Forwarding
Call Forward – On Busy, Call Forward – No Answer
Lowest

22.2 Firewall

22.2.1 Firewall Feature List

•
Blocking malicious DHCP Server
•
Allowing/blocking SIP packets
•
Allowing/blocking RTP/RTCP packets
•
Refusing directed broadcast
•
Refusing limited broadcast
•
Disallowing packets which can be used for port scanning, based on
All bits of TCP flag are cleared
▫
SYN & FIN bits set
▫
SYN & RST bits set
▫
FIN & RST bits sets
▫
FIN set while ACK is not
▫
PSH set while ACK is not
▫
URG set while ACK is not
▫
SYN Flood attack where out of SYN, ACK and RST bits only SYN is
▫
set
•
Enabling broadcast echo protection
•
Disable source routed packets
•
Enabling TCP SYN cookie protection
•
Disable ICMP Redirect Acceptance
•
Disable sending ICMP redirect messages
•
Refuse connection from IANA-reserved blocks
•
Allowing source quench messages (ICMP)
•
Allowing parameter problem messages (ICMP)
•
Allowing destination unreachable, service unavailable messages (ICMP)
•
Allowing time exceeded messages (ICMP)
•
Allowing ping (ICMP)
•
Disallowing connections to SOCKS, X-Windows, Open-Windows & NFS
ports
•
Support for enabling Telnet/SSH/FTP/HTTP/HTTPS Servers
•
Support for enabling NTP Client
•
Refusing packets from machine claiming to have external IP address
•
Refusing packets from machine having private class-A/B/C addresses
•
Refusing packets having source IP address as loop back address
•
Refusing malformed broadcast packets
•
Refusing packets having source IP address as multicast IP Addresses
D-Link Confidential
DVX-1000 User Manual
74