Dos(Denial Of Service Defense) - Draytek Vigor2100 Series User Manual

Fragments: Specify a fragmented packets action.
Don't care
Unfragmented
Fragmented
Too Short
An Example of Restricting Unauthorized Internet Services
This section will show a simple example to restrict someone from
accessing WWW services. In this example, we assume the IP address of
the access-restricted user is 192.168.1.10. The filter rule is created in
the Data Filter set and is shown as below. Port 80 is the HTTP protocol
port number for WWW services.
6.2.3 DoS (Denial of Service) Defense
The following sections will explain in more detail about DoS Defense
Setup by using the Web Configurator. It is a sub-functionality of IP
Filter/Firewall. There are a total of 15 kinds of defense function for
the DoS Defense Setup. By default, the DoS Defense functionality is
disabled. Further, once the DoS Defense functionality is enabled, the
Firewall Setup
Specify no fragment options in the filter rule.
Apply the rule to unfragmented packets.
Apply the rule to fragmented packets.
Apply the rule only to packets that are too short to contain a
complete header.
6-13