Firewall - D-Link DSL-2740U User Manual

Section 3 - Configuration
The Firewall window allows the Router to enforce specific predefined policies intended to protect against certain common types of attacks. There
are two general types of protection (DoS, Port Scan) that can be enabled on the Router, as well as filtering for specific packet types sometimes used
by hackers. The parameters used here are region-dependant. Please contact your local ISP for the optimized values.
To access the FIREWALL setting window, click on the Firewall button under the ADVANCED tab.
FIREWALL SETTINGS
SPI:
SPI (Stateful Packet Inspection) is a firewall feature
that checks the state of network connections. Only
legitimate packets are allowed to pass through.
DoS and Port
A DoS (denial-of-service) attack is characterized by
Scan an explicit attempt by attackers to prevent legitimate
users of a service from using that service.
Protection:
Examples include: attempts to "flood" a network,
thereby preventing
attempts to disrupt connections between two
machines, thereby preventing access to a service,
attempts to prevent a particular individual from
accessing a service, or, attempts to disrupt service
to a specific system or person.
Port scan protection is designed to block attempts
to discover vulnerable ports or services that might
be exploited in an attack from the WAN.
Rate & Burst
The Rate is the trigger threshold. When the
specified packets number has reached this rate, it
triggers once.
The Burst is the consecutive trigger number
allowed.
The router will stop all related application when the
Burst is matched and resume working after the
Rate is reduced below the configured number.
D-Link DSL-2740U User Manual

FIREWALL

legitimate network traffic,
61