Table of Contents
Advertisement
Block Land
Click the associated checkbox and then enforce the Vigor router to
defense the Land attacks. The LAN attack combines the SYN attack
technology with IP spoofing. A Land attack occurs when an attacker
sends spoofed SYN packets having the identical source and
destination addresses, as well as the port number, with those of the
victim.
Block Smurf
Click the checkbox to activate the Block Smurf function. The Vigor
router will reject any ICMP echo request destined to the broadcast
address.
Block trace router
Click the checkbox to activate this function. The Vigor router will not
forward any trace route packets.
Block SYN fragment
Click the checkbox to activate the Block SYN fragment function. Any
packets having SYN flag and more fragment bit set will be dropped.
Block Fraggle Attack
Click the checkbox to activate the Block fraggle Attack function. Any
broadcast UDP packets received from the Internet is blocked.
Activating the DoS/DDoS defense functionality might block some
legal packets. For example, when you activate the fraggle attack
defense, all broadcast UDP packets coming from the Internet are
blocked. Therefore, the RIP packets from the Internet might be
dropped.
Block TCP flag scan
Click the checkbox to activate the Block TCP flag scan function. Any
TCP packet with anomaly flag setting is dropped. Those scanning
activities include no flag scan, FIN without ACK scan, SYN
Firewall Setup
6-16
Advertisement
Table of Contents
