SMC Networks Barricade SMC7404BRA EU User Manual page 70

Parameter
H.323 data
channel idle
timeout
DoS Detect
Criteria
Total
incomplete
TCP/UDP
sessions HIGH
Total
incomplete
TCP/UDP
sessions LOW
Incomplete
TCP/UDP
sessions (per
min) HIGH
Incomplete
TCP/UDP
sessions (per
min) LOW
Maximum
incomplete
TCP/UDP
sessions number
from same host
Incomplete
TCP/UDP
sessions detect
sensitive time
period
Maximum
half-open
fragmentation
packet number
from same host
Half-open
fragmentation
detect sensitive
time period
Flooding cracker
block time
Defaults Description
180 sec The length of time for which an H.323 session
will be managed if there is no activity.
300 sessions Defines the rate of new unestablished sessions
that will cause the software to start deleting
half-open sessions.
250 sessions Defines the rate of new unestablished sessions
that will cause the software to stop deleting
half-open sessions.
250 sessions Maximum number of allowed incomplete TCP/
UDP sessions per min.
200 sessions Set this to 0 as no minimum setting is required
and setting it to anything higher will adversly
affect performance.
10 Maximum number of incomplete TCP/UDP
sessions from the same host.
300 msec Length of time before an incomplete TCP/UDP
session is detected as incomplete.
30 Maximum number of half-open fragmentation
packets from the same host.
10000 msec Length of time before a half-open fragmentation
session is detected as half-open.
300 sec Length of time from detecting a flood attack to
blocking of the attack.
F
IREWALL
4-45