Table 15: Typical Firewall Settings - Grandstream Networks UCM6100 Series User Manual

Ping Defense
Enable
SYN-Flood
Defense Enable
Ping-of-Death
Defense Enable
Under "Custom Firewall Settings", users could create new rules to accept, reject or drop certain traffic going
through the UCM6100. To create new rule, click on "Create New Rule" button and a new window will pop up for
users to specify rule options.
Right next to "Create New Rule" button, there is a checkbox for option "Reject Rules". If it's checked, all the rules
will be rejected except the firewall rules listed below. In the firewall rules, only when there is a rule that meets all
the following requirements, the option "Reject Rules" will be allowed to check:
•
Action: "Accept"
•
Type "In"
•
Destination port is set to the system login port (e.g., by default 8089)
•
Protocol is not UDP

Table 15: Typical Firewall Settings

If enabled, ICMP response will not be allowed for Ping request. The default
setting is disabled. To enable or disable it, click on the check box for the LAN or
WAN (UCM6100) interface.
Allows the UCM6100 to handle excessive amounts of SYN packets from one
source and keep the web portal accessible. There are two options available and
only one of these options may be enabled at one time.
•
eth(0)LAN defends against attacks directed to the LAN IP address of the
UCM6100.
•
eth(1)WAN defends against attacks directed to the WAN IP address of the
UCM6100.
SYN Flood Defense will limit the amount of SYN packets accepted by the UCM
from one source to 10 packets per second. Any excess packets from that source
will be discarded.
Enable to prevent Ping-of-Death attack to the device. The default setting is
disabled. To enable or disable it, click on the check box for the LAN or WAN
(UCM6100) interface.
UCM6100 Series User Manual
Version 1.0.18.13
P a g e | 78