Planet G.SHDSL.bis Bridge Router GRT-504, User Manual

Page: 147 / 152

GRT-504 4-Wire G.SHDSL.bis Firewall Router User’s Manual
>> protocol Configure protocol type
direction Configure direction mode
src_ip Configure source IP parameter
dest_ip Configure destination IP parameter
port Configure port parameter (TCP and UDP only)
tcp_flag Configure TCP flag (TCP only)
icmp_type Configure ICMP flag (ICMP only)
description Packet filtering rule description
enable
Enable the packet filtering rule
begin The schedule of beginning time
end The schedule of ending time
action Configure action mode
Command Description
Protocol Configure protocol type (ANY,TCP,UDP,ICMP,GRE,RSVP,ESP,AH)
Direction Configure direction mode (INBOUND,OUTBOUND)
Src_ip Configure source IP parameter
Dest_ip Configure destination IP parameter
Port Configure port parameter (TCP and UDP only)
Tcp_flag Configure TCP flag (TCP only)
Icmp_type Configure ICMP flag (ICMP only)
Description Packet filtering rule description
Enable Enable the packet filtering rule (ON,OFF)
Begin The schedule of beginning time
End The schedule of ending time
Action Configure action mode (DENY, PERMIT)
7.12.11.3 DoS Protection
DoS protection parameters can be configured in dos_protect menu.
Move the cursor to
dos_protect and press enter.
>> syn_flood Enable protection SYN flood attack
icmp_flood Enable protection ICMP flood attack
udp_flood Enable protection UDP flood attack
ping_death Enable protection PING of death attack
land_attack Enable protection land attack
ip_spoff Enable protection IP spoofing attack
smurf_attack Enable protection smurf attack
fraggle_attack
Enable protection fraggle attack
Command Description
syn_flood Enable protecting SYN flood attack (Threshold packets per second : 0~700)
icmp_flood Enable protecting ICMP flood attack (Threshold packets per second : 0~700)
udp_flood Enable protecting UDP flood attack (Threshold packets per second : 0~700)
ping_death Enable protecting PING of death attack
land_attack Enable protecting land attack
ip_spoff Enable protecting IP spoofing attack
smurf_attack Enable protecting smurf attack
146