Teltonika RUT240 User Manual page 71

Field Name
1. Eoable SYN food protectoo
2. SYN food rate
3. SYN food burst
4. TCP SYN cookies
7.6.6.2 Remote ICMP requests
Atackers are usiog ICMP echo request packets directed to IP broadcast addresses from remote locatoos to
geoerate deoial-of-service atacks.
Field Name
1. Eoable ICMP requests
2. Eoable ICMP limit
3. Limit period
4. Limit
5. Limit burst
7.6.6.3 SSH Attack Prevention
Preveot SSH (allows a user to ruo commaods oo a machioe's commaod prompt without them beiog physically
preseot oear the machioe.) atacks by limitog coooectoos io a defoed period.
Sample ialue
Eoable/Disable
"25"
"50"
Eoable/Disable
Sample ialue
Eoable/Disable
Eoable/Disable
Secood/Mioute/Hour/Day
"10"
"5"
Explanaton
Makes router more resistaot to SYN food atacks.
Set rate limit (packets/secood) for SYN packets above
which the traafc is coosidered fooded.
Set burst limit for SYN packets above which the traafc is
coosidered fooded if it exceeds the allowed rate.
Eoable the use of SYN cookies (partcular choices of
ioital TCP sequeoce oumbers by TCP servers).
Explanaton
Blocks remote ICMP echo-request type
Eoable ICMP echo-request limit io selected period
Select io what period limit ICMP echo-request
Maximum ICMP echo-requests duriog the period
Iodicatog the maximum burst before the above limit
kicks io.
71