Billion BiPAC 7402GL R4 User Manual page 76

Wireless adsl firewall router

Table of Contents

For SYN Flood, ICMP Echo Storm and ICMP flood, IDS will just warn the user in the Event Log. It

cannot protect against such attacks.

Intrusion Name

Ascend Kill

WinNuke

Smurf

Land attack

Echo/CharGen Scan

Echo Scan

CharGen Scan

X'mas Tree Scan

IMAP

SYN/FIN Scan

SYN/FIN/RST/ACK

Scan

Net Bus Scan

Back Orifice Scan

SYN Flood

ICMP Flood

ICMP Echo

Src IP: Source IP

Src Port: Source Port

Dst Port: Destination Port

Dst IP: Destination IP

Table 2: Hacker attack types recognized by the IDS

Detect Parameter Blacklist

Ascend Kill data

Src IP

TCP

Port 135, 137~139,

Src IP

Flag: URG

ICMP type 8

Dst IP

Des IP is broadcast

SrcIP = DstIP

UDP Echo Port and

CharGen Port

UDP Dst Port =

Src IP

Echo(7)

UDP Dst Port =

Src IP

CharGen(19)

TCP Flag: X'mas

Src IP

TCP Flag: SYN/FIN

DstPort: IMAP(143)

Src IP

SrcPort: 0 or 65535

TCP,

No Existing session

Src IP

And

Scan

Hosts

more than five.

TCP

No Existing session

SrcIP

DstPort = Net Bus

12345,12346, 3456

UDP,

DstPort

SrcIP

Orifice Port (31337)

Max

TCP

Open

Handshaking

Count (Default 100

c/sec)

Max ICMP Count

(Default 100 c/sec)

Max PING Count

(Default 15 c/sec)

Type of Block

Drop Packet Show Log

Duration

DoS

Yes

DoS

Yes

Victim

Yes

Protection

Yes

Scan

Yes

Scan

Yes

Scan

Yes

Scan

Yes

Scan

Yes

Scan

Yes

Scan

Yes

Table of Contents

Billion BiPAC 7402GL R4 User Manual page 76

Related Manuals for Billion BiPAC 7402GL R4

Related Products for Billion BiPAC 7402GL R4

Table of Contents