Security; Auto Dos Attack Prevention - Buffalo BS-GS20 Series User Manual

Chapter 2 Settings

Security

Auto DoS Attack Prevention

Configure packets to be dropped.
LAND Attack
Minimum TCP Header Size
TCP/UDP L4 Port
ICMP
TCP Flag
Fragment
If enabled, the packets whose source IP address and destination IP address are
the same will be dropped.
If enabled, the packets whose TCP header size is less than 20 bytes will be
dropped.
If enabled, the packets whose source port number and destination port number
are the same will be dropped. Disable when using SNTP, RADIUS, and DHCP relay.
If enabled, the ICMP packets whose ICMP header+data is more than 512 bytes.
If enabled, the illegal TCP flagged packets will be dropped. This will not be
applied to the fragment packets.
If checked, the configuration of [TCP Flag] will be applied also to the fragment
packets.
48