Figure 70: Protecting The Router And Lan From Internet Attacks - D-Link DSR-150 User Manual

Unified Services Router
Figure 70 : Prote cting the route r and LAN from inte rne t attack s
WAN S ecuri ty Check s :
En ab le St ealt h M o d e: If St ealt h M o de is en ab led, t h e ro u ter will n o t res p ond t o p o rt
s can s fro m t h e W A N. Th is makes it les s s u s cep t ib le t o d is co v ery an d at t acks .
Blo ck TCP Flo o d : If t h is o p t io n is en ab led , t h e ro u t er will d ro p all in v alid TCP
p acket s an d b e p ro t ect ed fro m a SYN flo o d at t ack.
LAN S ecuri ty Check s :
Blo ck UDP Flo o d : If t h is o p t io n is en abled, t h e ro u t er will n o t accep t mo re t h an 20
s imu lt an eo u s , act iv e UDP co n n ect io n s fro m a s in g le co mp u t er o n t h e LA N.
UDP Co n n ect io n Limit : Yo u can s et t h e n u mb er o f s imu lt an eo u s act iv e UDP
co n n ect io n s t o b e accep t ed fro m a s in g le co mp u t er o n t h e LA N; t h e d efau lt is 25
ICS A S etti ng s :
Blo ck ICM P No t ificat io n : s elect in g t h is p rev en t s ICM P p acket s fro m b ein g
id en t ified as s uch. ICM P p acket s, if id en t ified , can b e cap t u red an d u s ed in a Pin g
(ICM P) flo o d Do S at t ack.
109
User Manual