Draytek Vigor2960 Series User Manual page 200

Item
Port Scan Threshold
Block IP Options
Block Land
Block SMURF
Block Trace Route
Block SYN Fragment
Block Fraggle
Block Tear Drop
Block Ping of Death
Block ICMP Fragment
Block Unknown
Protocol
Apply
Cancel
After finished the above settings, click Apply to save the configuration.
Description
packets per second exceeds the user-defined threshold value.
The default threshold is 500 pps (packets per second).
Click Enable to activate the Block IP options function. The
router will ignore any IP packets with IP option field
appearing in the datagram header.
Click Enable to activate the Block Land function. A Land
attack occurs when an attacker sends spoofed SYN packets
with identical source address, destination addresses and port
number as those of the victim.
Click Enable to activate the Block Smurf function. The
router will reject any ICMP echo request destined for the
broadcast address.
Click Enable to activate the Block Trace Route function.
Click Enable to activate the Block SYN fragment function.
Any packets having the SYN flag and fragmented bit sets
will be dropped.
Click Enable to activate the Block fraggle Attack function.
Any broadcast UDP packets received from the Internet are
blocked.
Click Enable to activate the Block Tear Drop function. This
attack involves the perpetrator sending overlapping packets
to the target hosts so that target host will hang once they
re-construct the packets. The routers will block any packets
resembling this attacking activity.
Click Enable to activate the Block Ping of Death function.
Many machines may crash when receiving an ICMP
datagram that exceeds the maximum length. The router will
block any fragmented ICMP packets with a length greater
than 1024 octets.
Click Enable to activate the Block ICMP fragment function.
Any ICMP packets with fragmented bit sets are dropped.
Click Enable to activate the Block Unknown Protocol
function. The router will block any packets with unknown
protocol types.
Click it to save the configuration.
Click it to discard the settings configured in this page.
192
Vigor2960 Series User's Guide