Draytek Vigor2760 User Manual page 157

Block Smurf
Block Ping of Death
Block Trace Route
Block ICMP
Fragment
Block SYN fragment
Block Unassigned
Numbers
Block Fraggle Attack
Apply
Clear
Cancel
3. After finished the settings above, click Apply to save the settings then click Cancel to
return to previous page.
Vigor2760 Series User's Guide
greater than 1024 octets.
The Vigor router will ignore any broadcasting ICMP echo
request.
This attack involves the perpetrator sending overlapping
packets to the target hosts so that those target hosts will hang
once they re-construct the packets. The Vigor routers will
block any packets realizing this attacking activity.
Enforce the Vigor router not to forward any trace route
packets.
Any ICMP packets with more fragment bit set are dropped.
The Vigor router will drop any packets having SYN flag and
more fragment bit set.
Individual IP packet has a protocol field in the datagram
header to indicate the protocol type running over the upper
layer. However, the protocol types greater than 100 are
reserved and undefined at this time. Therefore, the router
should have ability to detect and reject this kind of packets.
Any broadcast UDP packets received from the Internet is
blocked.
Activating the DoS/DDoS defense functionality might block
some legal packets. For example, when you activate the
fraggle attack defense, all broadcast UDP packets coming
from the Internet are blocked. Therefore, the RIP packets
from the Internet might be dropped.
Click it to save the settings.
Click it to remove the modification of the web page.
Click it to return to previous web page.
147