QNO QMS1024G, User Manual

Page: 72 / 111

Gigabit Switch
72
LABEL DESCRIPTION
DMAC = SMAC
Both the source and the destination MAC addresses are the same.

Disabled : Disable the item DoS setting.

Enabled : Enable the item DoS setting.
Land
Both the source and the destination IPv4/IPv6 addresses are the same.

Disabled : Disable the item DoS setting.

Enabled : Enable the item DoS setting.
UDP Blat
Both the source and the destination UDP port are the same.

Disabled : Disable the item DoS setting.

Enabled : Enable the item DoS setting.
TCP Blat
Both the source and the destination TCP port are the same.

Disabled : Disable the item DoS setting.

Enabled : Enable the item DoS setting.
POD
Ping packets that length are larger than 65535 bytes.

Disabled : Disable the item DoS setting.

Enabled : Enable the item DoS setting.
IPv6 Min
Fragment
IPv6 fragmented packets (not including the last one) that payload length
less than 1240 bytes, and the Min length can be configured if needed.

Disabled : Disable the item DoS setting.

Enabled : Enable the item DoS setting.
ICMP Fragments
Fragmented ICMP packets.

Disabled : Disable the item DoS setting.

Enabled : Enable the item DoS setting.
IPv4 Ping Max
Size
IPv4 PING packet with the length.

Disabled : Disable the item DoS setting.

Enabled : Enable the item DoS setting.
Ipv6 Ping Max
Size
IPv6 PING packet with the length.

Disabled : Disable the item DoS setting.

Enabled : Enable the item DoS setting.
Ping Max Size
Setting
Ping packet Max Size Setting. The default value is 512 Bytes, it can be
configured if needed.
Smurf Attack
ICMP echo request packet that destination IPv4 address is broadcast
address. The default Netmask length is 0, and it can be configured if
needed.

Disabled : Disable the item DoS setting.

Enabled : Enable the item DoS setting.
TCP Min Hdr Size
TCP packet that header length is less than the configured value.
The default TCP Min Hdr Size is 20, it can be configured if needed.

Disabled : Disable the item DoS setting.

Enabled : Enable the item DoS setting.
TCPSYN
(SPORT<1024)
TCP SYN packets with source port less than 1024.

Disabled : Disable the item DoS setting.

Enabled : Enable the item DoS setting.
Null Scan Attack
TCP sequence number is zero, and all control flags are zeroes.

Disabled : Disable the item DoS setting.

Enabled : Enable the item DoS setting.
X-Mas Scan
Attack TCP sequence number is zero, and the FIN/URG/PSH flags are set.

Disabled : Disable the item DoS setting.