Table of Contents
Advertisement
The following items are displayed on this screen:
Enable Broadcast Storm Defense:
►
Enable Block Ping:
►
Enable TCP SYN Flood Defense:
►
Enable UDP Flood Defense:
►
Enable ICMP Defense:
►
Enable ARP Attack Defense:
►
Enable Port Scan Defense:
►
Enable Land Based Defense:
►
Enable Ping Of Death Defense:
►
Enable Teardrop Defense:
►
Enable Fraggle Defense:
►
BG9008W User Manual
Figure 3-45 Attack Defense
Enable or disable Broadcast Storm Defense.
Enable or disable Block Ping function.
Enable or disable TCP SYN Flood Defense.
Enable or disable UDP Flood Defense.
Enable or disable ICMP Defense.
Enable or disable ARP Attack Defense.
A port scanner is a software application designed to probe a
server or host for open ports. Check the box to prevent port
scanning.
The Land Denial of Service attack works by sending a spoofed
packet with the SYN flag - used in a "handshake" between a
client and a host - set from a host to any port that is open and
listening. If the packet is programmed to have the same
destination and source IP address, when it is sent to a machine,
via IP spoofing, the transmission can fool the machine into
thinking it is sending itself a message, which, depending on the
operating system, will crash the machine. Check the box to
enable Land Based Defense.
Ping of death is a denial of service (DoS) attack caused by an
attacker deliberately sending an IP packet larger than the
65,536 bytes allowed by the IP protocol. Check the box to
enable Ping of Death Defense.
Teardrop is a program that sends IP fragments to a machine
connected to the Internet or a network. Check the box to enable
Teardrop Defense.
A fraggle attack is a variation of a Smurf attack where an
attacker sends a large amount of UDP traffic to ports 7 (echo)
and 19 (chargen) to an IP Broadcast Address, with the
Page 35 of 133
Advertisement
Table of Contents
