Teltonika RUT230 User Manual page 70

Field Name
1. Enable SYN flood protection
2. SYN flood rate
3. SYN flood burst
4. TCP SYN cookies
7.6.6.2 Remote ICMP requests
Attackers are using ICMP echo request packets directed to IP broadcast addresses from remote locations to
generate denial-of-service attacks.
Field Name
1. Enable ICMP requests
2. Enable ICMP limit
3. Limit period
4. Limit
5. Limit burst
7.6.6.3 SSH Attack Prevention
Prevent SSH (allows a user to run commands on a machine's command prompt without them being physically
present near the machine.) attacks by limiting connections in a defined period.
Sample value
Enable/Disable
"25"
"50"
Enable/Disable
Sample value
Enable/Disable
Enable/Disable
Second/Minute/Hour/Day
"10"
"5"
Explanation
Makes router more resistant to SYN flood attacks.
Set rate limit (packets/second) for SYN packets above
which the traffic is considered flooded.
Set burst limit for SYN packets above which the traffic is
considered flooded if it exceeds the allowed rate.
Enable the use of SYN cookies (particular choices of
initial TCP sequence numbers by TCP servers).
Explanation
Blocks remote ICMP echo-request type
Enable ICMP echo-request limit in selected period
Select in what period limit ICMP echo-request
Maximum ICMP echo-requests during the period
Indicating the maximum burst before the above limit
kicks in.
70