Table of Contents
Advertisement
FINscan, Xmas scan and full Xmas scan.
Block Tear Drop
Click the checkbox to activate the Block Tear Drop function. Many
machines may crash when receiving ICMP datagrams (packets) that
exceed the maximum length. To avoid this type of attack, the Vigor
router is designed to be capable of discarding any fragmented ICMP
packets with a length greater than 1024 octets.
Block Ping of Death
Click the checkbox to activate the Block Ping of Death function. This
attack involves the perpetrator sending overlapping packets to the
target hosts so that those target hosts will hang once they
re-construct the packets. The Vigor routers will block any packets
realizing this attacking activity.
Block ICMP Fragment
Click the checkbox to activate the Block ICMP fragment function.
Any ICMP packets with more fragment bit set are dropped.
Block Unknown Protocol
Click the checkbox to activate the Block Unknown Protocol function.
Individual IP packet has a protocol field in the datagram header to
indicate the protocol type running over the upper layer. However, the
protocol types greater than 100 are reserved and undefined at this
time. Therefore, the router should have ability to detect and reject
this kind of packets.
Firewall Setup
6-17
Advertisement
Table of Contents
