14
DoS
page
A Denial of Service (DoS) attack is an attempt to make a device unavailable to its users. DoS attacks
saturate the device with external communication requests, so that it cannot respond to legitimate
traffic. These attacks usually lead to a device CPU overload.
The DoS protection feature is a set of predefined rules that protect the network from malicious attacks.
The
Property
section allows activation of the security settings.
POD:
Avoids ping of death attack.
Land:
Drops the packets if the source IP address is equal to the destination IP address.
UDP Blat:
Drops the packets if the UDP source port equals to the UDP destination port.
TCP Blat:
Drops the packages if the TCP source port is equal to the TCP destination port.
DMAC = SMAC:
Drops the packets if the destination MAC address is equal to the source MAC address.
Null Scan Attack:
Drops the packets with NULL scan.
X-Mas Scan Attack:
Drops the packets if the sequence number is zero, and the FIN, URG and PSH bits
are set.
TCP SYN-FIN Attack:
Drops the packets with SYN and FIN bits set.