3Com 3C16120 - SuperStack 3 Server Load Balancer, Руководство пользователя

Страница: 72 / 99

72 C
HAPTER
8: C
ONFIGURING FOR
L
OAD
B
ALANCING
Modifying Security
Filters (Attack
Mitigation)
The Server Load Balancer provides Attack Mitigation features that help to
prevent Denial of Service and Distributed Denial of Service attacks.
When enabled, the attack mitigation features cause the Server Load
Balancer to recognize and filter out security attacks. Table 12 describes
the available filters and their descriptions.
Modifying Security
Filters
To modify the security filters, complete the following steps:
1 Click Device View on the Toolbar.
2 Select Security > Attack Filters .
3 Click Modify . The Modify Attack Filters page appears.
4 Select the attack filters you wish to enable and click OK .
Table 12 Filters and Descriptions
Filter Description
Smurf Filter Filter ICMP packets sent to broadcast or multicast
addresses and unsolicited ICMP ECHO replies
FTP Restricted Port Filter Filter out a range of FTP data port requests.
IP Source Route Filter Filter packets which contain the IP source route option.
LAND Attack Filter packets which have matching destination and
source IP addresses.
Fraggle Attack Filter Filter UDP ECHO requests sent to a broadcast or
multicast address and unsolicited UDP packets from
the UDP ECHO port.
FTP Bounce Filter Filter FTP traffic when the port command issued
contains an address that differs from the requesting
host.
IP Options Filter Filter packets that contain any IP options (for example,
Record Route and Time Stamp) in the packet header.
You can filter packets which have packet headers
containing only the Strict Source Route and Loose
Source Route IP options using the IP Source Route filter
slb_gsg.bk Page 72 Thursday, May 31, 2001 8:57 AM