65
Field
Description
POD
Avoids ping of death attack.
Land
Drops the packets if the source IP address is equal to the
destination IP address.
UDP Blat
Drops the packets if the UDP source port equals to the UDP
destination port.
TCP Blat
Drops the packages if the TCP source port is equal to the TCP
destination port.
DMAC=SMAC
Drops the packets if the destination MAC address is equal to
the source MAC address.
Null Scan Attack
Drops the packets with NULL scan.
X-Mas Scan Attack
Drops the packets if the sequence number is zero, and the FIN,
URG and PSH bits are set.
TCP SYN-FIN Attack
Drops the packets with SYN and FIN bits set.
TCP SYN-RST Attack
Drops the packets with SYN and RST bits set.
ICMP Flagment
Drops the fragmented ICMP packets.
TCP-SYN(SPORT<1024)
Drops SYN packets with sport less than 1024.
TCP Fragment (Offset=1)
Drops the TCP fragment packets with offset equals to one.
Ping Max Size
Specify the maximum size of the ICMPv4/ICMPv6 ping
packets. The valid range is from 0 to 65535 bytes, and the
default value is 512 bytes.
IPv4 Ping Max Size
Checks the maximum size of ICMP ping packets, and drops the
packets larger than the maximum packet size.
IPv6 Ping Max Size
Checks the maximum size of ICMPv6 ping packets, and drops
the packets larger than the maximum packet size
