Table of Contents
Advertisement
Table 39 DDOS (continued)
LABEL
Prevent from IP
Spoof
Prevent from
ICMP redirect
Prevent from
PING of Death
Prevent from
PING from WAN
HES-309M Series User's Guide
DESCRIPTION
Select this to monitor for and block IP address spoof attacks.
An IP address spoof is an attack whereby the source IP address in the
incoming IP packets allows a malicious party to masquerade as a
legitimate user and gain access to the client device.
Select this to monitor for and block ICMP redirect attacks.
An ICMP redirect attack is one where forged ICMP redirect messages
can force the client device to route packets for certain connections
through an attacker's host.
Select this to monitor for and block ping of death attacks.
A Ping of Death (POD) attack is one where larger-than-allowed ping
packets are fragmented then sent against a client device. This results in
the client device suffering from a buffer overflow and subsequent
system crash.
Select this to ignore ping requests from the WAN.
Chapter 8 Security
109
Advertisement
Table of Contents
