Appendix; Feature Priority Table; Firewall; Firewall Feature List - D-Link DVX-1000 User Manual

21 Appendix

21.1 Feature Priority Table

Priority Feature
Highest
Do Not Disturb –Forward to Voicemail
Call Forward – Always
Follow Me – Call Forwarding
Call Forward – On Busy, Call Forward – No Answer
Lowest

21.2 Firewall

21.2.1 Firewall Feature List

• Blocking malicious DHCP Server
• Allowing/blocking SIP packets
• Allowing/blocking RTP/RTCP packets
• Refusing directed broadcast
• Refusing limited broadcast
• Disallowing packets which can be used for port scanning, based on
▫ All bits of TCP flag are cleared
▫ SYN & FIN bits set
▫ SYN & RST bits set
▫ FIN & RST bits sets
▫ FIN set while ACK is not
▫ PSH set while ACK is not
▫ URG set while ACK is not
▫ SYN Flood attack where out of SYN, ACK and RST bits only SYN is set
• Enabling broadcast echo protection
• Disable source routed packets
• Enabling TCP SYN cookie protection
• Disable ICMP Redirect Acceptance
• Disable sending ICMP redirect messages
• Refuse connection from IANA-reserved blocks
• Allowing source quench messages (ICMP)
• Allowing parameter problem messages (ICMP)
• Allowing destination unreachable, service unavailable messages (ICMP)
• Allowing time exceeded messages (ICMP)
• Allowing ping (ICMP)
• Disallowing connections to SOCKS, X-Windows, Open-Windows & NFS
ports
• Support for enabling Telnet/SSH/FTP/HTTP/HTTPS Servers
• Support for enabling NTP Client
• Refusing packets from machine claiming to have external IP address
• Refusing packets from machine having private class-A/B/C addresses
D-Link Confidential
DVX-1000 User Manual
36