What You Need To Know; The Firewall Screen; Firewall - ZyXEL Communications XMG3512-B10A User Manual

16.1.2 Wha t Yo u Ne e d to Kno w
SYN Atta c k
A SYN attack floods a targeted system with a series of SYN packets. Each packet causes the targeted
system to issue a SYN-ACK response. While the targeted system waits for the ACK that follows the SYN-
ACK, it queues up all outstanding SYN-ACK responses on a backlog queue. SYN-ACKs are moved off the
queue only when an ACK comes back or when an internal timer terminates the three-way handshake.
Once the queue is full, the system will ignore all incoming SYN requests, making the system unavailable
for legitimate users.
Do S
Denials of Service (DoS) attacks are aimed at devices and networks with a connection to the Internet.
Their goal is not to steal information, but to disable a device or network so users no longer have access
to network resources. The XMG is pre-configured to automatically detect and thwart all known DoS
attacks.
DDo S
A DDoS attack is one in which multiple compromised systems attack a single target, thereby causing
denial of service for users of the targeted system.
L AND Atta c k
In a LAND attack, hackers flood SYN packets into the network with a spoofed source IP address of the
target system. This makes it appear as if the host computer sent the packets to itself, making the system
unavailable while the target system tries to respond to itself.
Ping o f De a th
Ping of Death uses a "ping" utility to create and send an IP packet that exceeds the maximum 65,536
bytes of data allowed by the IP specification. This may cause systems to crash, hang or reboot.
SPI
Stateful Packet Inspection (SPI) tracks each connection crossing the firewall and makes sure it is valid.
Filtering decisions are based not only on rules but also context. For example, traffic from the WAN may
only be allowed to cross the firewall in response to a request from the LAN.
16.2 T he Fire wa ll Sc re e n
Use this screen to set the security level of the firewall on the XMG. Firewall rules are grouped based on
the direction of travel of packets to which they apply.
Click
Se c urity > Fire wa ll
Chapter 16 Firewall
to display the screen.
G e ne ra l
XMG3512-B10A User's Guide
182