Icmpsettings - D-Link NetDefend DFL-210 Cli Reference Manual

3.51.7. ICMPSettings

Settings related to fragmented packets.
Properties
PseudoReass_MaxConcurrent
IllegalFrags
DuplicateFragData
FragReassemblyFail
DroppedFrags
DuplicateFrags
FragmentedICMP
MinimumFragLength
ReassTimeout
ReassTimeLimit
ReassDoneLinger
ReassIllegalLinger
3.51.7. ICMPSettings
Description
Settings related to the ICMP protocol.
Properties
ICMPSendPerSecLimit
SilentlyDropStateICMPErrors
Note
This object type does not have an identifier and is identified by the name of the type
only. There can only be one instance of this type.
Maximum number of concurrent fragment reassemblies. Set
to 0 to drop all fragments. (Default: 1024)
Illegaly constructed fragments; partial overlaps, bad sizes,
etc. (Default: DropLog)
On receipt of duplicate fragments, verify matching data...
(Default: Check8)
Failed packet reassembly attempts - due to timeouts or packet
losses. (Default: LogSuspectSubseq)
Fragments of packets dropped due to rule base. (Default:
LogSuspect)
Duplicate fragments received. (Default: LogSuspect)
Fragmented ICMP messages other than Ping; normally inval-
id. (Default: DropLog)
Minimum allowed length of non-last fragments. (Default: 8)
Timeout of a reassembly, since previous received fragment.
(Default: 65)
Maximum lifetime of a reassembly, since first received frag-
ment. (Default: 90)
How long to remember a completed reassembly (watching for
old dups). (Default: 20)
How long to remember an illegal reassembly (watching for
more fragments). (Default: 60)
Maximum number of ICMP responses that will be sent each
second. (Default: 500)
Silently drop ICMP errors regarding statefully tracked open
connections. (Default: Yes)
170
Chapter 3. Configuration Reference