Asus iPBX30, Руководство пользователя

Страница: 19 / 160

Chapter 2 iPBX30 User Manual
6
2.3.2.3 Defense against DoS Attacks
The iPBX30 Firewall has an Attack Defense Engine that protects
internal networks from known types of Internet attacks. It provides
automatic protection from Denial of Service (DoS) attacks such
as SYN flooding, IP smurfing, LAND, Ping of Death and all re-
assembly attacks. For example, the iPBX30 Firewall provides
protection from “WinNuke”, a widely used program to remotely
crash unprotected Windows systems in the Internet. The iPBX30
Firewall also provides protection from a variety of common Internet
attacks such as IP Spoofing, Ping of Death, Land Attack, and
Reassembly attacks.
The type of attack protections provided by the iPBX30 is listed in
the table below.
Table 2.1. DoS Attacks
Type of Attack Name of Attacks
Re-assembly Attacks Bonk, Boink, Teardrop ( New Tear),
Overdrop, Opentear, Syndrop, Jolt,
IP fragmentation overlap
ICMP Attacks Ping of Death, Smurf, Twinge
Flooders Logging only for ICMP Flooder, UDP
Flooder, SYN Flooder
Port Scans Logging only for TCP SYN Scan,
Attacking packets dropped: TCP
XMAS Scan, TCP Null Scan, TCP
Stealth Scan
Protection with PF Rules Echo-Chargen, Ascend Kill
Miscellaneous Attacks IP Spoofing, LAND, Targa, Winnuke