Accton Technology Edge-Core OD200, Руководство пользователя

Страница: 70 / 124

Gateway Configuration
5-12
5
Firewall Options
The OD200’s firewall enables access control of client PCs, blocks common hacker
attacks, including IP Spoofing, Land Attack, Ping of Death, Smurf Attack, TCP null
scan, ICMP defect, and TCP SYN flooding. The firewall does not significantly affect
system performance and it is best to leave it enabled to protect your network.
Figure 5-13 Firewall Options
Enable Hacker Attack Protect – Network attacks that deny access to a network
device are called DoS attacks. DoS attacks are aimed at devices and networks with
a connection to the Internet. Their goal is not to steal information, but to disable a
device or network so users no longer have access to network resources. The Router
protects against the following DoS attacks: IP Spoofing, Land Attack, Ping of Death,
Smurf Attack, TCP null scan, ICMP defect, and TCP SYN flooding.
Discard PING from WAN side – Prevents pings on the unit’s WiMAX interface from
being routed to the network.
Discard to PING the Gateway – Prevents any response to a ping to the unit’s IP
address.
Drop Port Scan – Prevents outside hackers form testing the TCP/UDP port
numbers on the unit for any services.