![background image](http://html1.mh-extra.com/html/zyxel-communications/zyair/zyair_user-manual_943565135.webp)
ZyAIR Wireless Gateway Series User’s Guide
Introduction to Firewalls
11-5
Figure 11-2 Three-Way Handshake
Under normal circumstances, the application that initiates a session sends a SYN (synchronize) packet to the
receiving server. The receiver sends back an ACK (acknowledgment) packet and its own SYN, and then the
initiator responds with an ACK (acknowledgment). After this handshake, a connection is established.
2-a
SYN Attack
floods a targeted system with a series of SYN packets. Each packet causes the
targeted system to issue a SYN-ACK response. While the targeted system waits for the ACK that
follows the SYN-ACK, it queues up all outstanding SYN-ACK responses on what is known as a
backlog queue. SYN-ACKs are moved off the queue only when an ACK comes back or when an
internal timer (which is set at relatively long intervals) terminates the three-way handshake. Once
the queue is full, the system will ignore all incoming SYN requests, making the system unavailable
for legitimate users.
Figure 11-3 SYN Flood
Summary of Contents for ZYAIR
Page 1: ...ZyAIR Wireless Gateway Series User s Guide Version 3 50 July 2003...
Page 20: ......
Page 26: ......
Page 28: ......
Page 36: ......
Page 58: ......
Page 66: ......
Page 98: ......
Page 99: ...WAN III Part III WAN This part covers the web configurator screen and information about WAN...
Page 100: ......
Page 112: ......
Page 130: ......
Page 166: ......
Page 180: ...ZyAIR Wireless Gateway Series User s Guide 15 4 Logs Screens Figure 15 2 Log Settings...
Page 189: ......
Page 205: ......
Page 213: ......
Page 236: ......
Page 246: ......
Page 268: ......
Page 286: ......
Page 294: ......
Page 324: ......
Page 334: ......
Page 340: ......
Page 352: ......
Page 356: ......
Page 368: ......
Page 378: ......