D-Link DSL-G624M, User Manual

Page: 51 / 69

DSL-G624M Wireless 108G MIMO ADSL2/2+ Router User’s Guide
41
Firewall
F
irewall Configuration Menu
When DoS, Port Scan, or Service Filtering Protection is enabled, it will create a firewall policy to protect your network
against the following:
Dos Protection Port Scan Protection Service Filtering
SYN Flood check
ICMP Redirection check
FIN/URG/PSH attack
Xmas Tree Scan
Null Scan attack
SYN/RST attack
SYN/FIN Scan
Ping from External Network
Telnet from External Network
FTP from External Network
DNS from External Network
A DoS "denial-of-service" attack is characterized by an explicit attempt by attackers to prevent legitimate users of a
service from using that service. Examples include: attempts to "flood" a network, thereby preventing legitimate network
traffic, attempts to disrupt connections between two machines, thereby preventing access to a service, attempts to
prevent a particular individual from accessing a service, or, attempts to disrupt service to a specific system or person.
Port scan protection is designed to block attempts to discover vulnerable ports or services that might be exploited in an
attack from the WAN.
The Service Filtering options allow you to block FTP, Telnet response, Pings, etc, from the external network. Check
the category you want to block to enable filtering of that type of packet.
When you have selected the desired Firewall policies, click the Apply button to enforce the policies. Remember to save
any configuration changes.
The Firewall Configuration menu allows the
Router to enforce specific predefined policies
intended to protect against certain common
types of attacks. There are two general types
of protection (DoS, Port Scan) that can be
enabled on the Router, as well as filtering for
specific packet types sometimes used by
hackers.
You can choose to Enable or Disable
protection against a customized basket of
attack and scan types. To enable
DoS
Protection or Port Scan Protection , select
the Enable radio button for the protection type
and click in the selection boxes for the various
types of protection listed under each.
Note
Service Filtering may
interfere with other
configurations such as
DHCP Relay or
Remote Management
via Telnet.