Planet POE-1200G User Manual page 42

Firewall Protection
Object
SPI Firewall
Block SYN Flood
Block FIN Flood
Block UDP Flood
Block ICMP Flood
IP TearDrop
Ping Of Death
TCP packets with SYN
and FIN Bits set
TCP packets with FIN Bit
set but no ACK Bit set
TCP packets without Bits
set
HTTP Port
HTTPs Port
Temporarily block when
login failed
IP blocking period
Blocked IP
Table 4-3-1: Descriptions of the Firewall Protection Objects Screen
Description
The SPI Firewall prevents attack and improper access to network
resources.
The default configuration is enabled.
SYN Flood is a popular attack way. DoS and DDoS are TCP
protocols. Hackers like using this method to make a fake connection
that involves the CPU, memory, and so on.
The default configuration is enabled.
If the function is enabled, when the number of the current FIN
packets is beyond the set value, the PoE+ Managed Injector Hub will
start the blocking function immediately.
The default configuration is disabled.
If the function is enabled, when the number of the current
UPD-FLOOD packets is beyond the set value, the PoE+ Managed
Injector Hub will start the blocking function immediately.
The default configuration is disabled.
ICMP is kind of a pack of TCP/IP; its important function is to transfer
simple signal on the Internet. There are two normal attack ways
which hackers like to use, Ping of Death and Smurf attack.
The default configuration is disabled.
If the function is enabled, the PoE+ Managed Injector Hub will block
Teardrop attack that is targeting on TCP/IP fragmentation
reassembly codes.
If the function is enabled, the PoE+ Managed Injector Hub will block
Ping of Death attack that aims to disrupt a targeted machine by
sending a packet larger than the maximum allowable size causing
the target machine to freeze or crash.
Set the function as enable or disable.
Set the function as enable or disable.
Set the function as enable or disable.
The default is 80.
The default is 443.
The default is 0. (0 means no limit).
The default is 0. (0 means permanent blocking).
0.0.0.0.