Draytek Vigor 2200V, Руководство пользователя

Страница: 65 / 143

Firewall Setup
6-16
Block Land
Click the associated checkbox and then enforce the Vigor router to
defense the Land attacks. The LAN attack combines the SYN attack
technology with IP spoofing. A Land attack occurs when an attacker
sends spoofed SYN packets having the identical source and destination
addresses, as well as the port number, with those of the victim.
Block Smurf
Click the checkbox to activate the Block Smurf function. The Vigor
router will reject any ICMP echo request destined to the broadcast
address.
Block Block trace router
Click the checkbox to activate this function. The Vigor router will not
forward any trace route packets.
Block SYN fragment
Click the checkbox to activate the Block SYN fragment function. Any
packets having SYN flag and more fragment bit set will be dropped.
Block Fraggle Attack
Click the checkbox to activate the Block fraggle Attack function. Any
broadcast UDP packets received from the Internet is blocked.
Activating the DoS/DDoS defense functionality might block some legal
packets. For example, when you activate the fraggle attack defense,
all broadcst UDP packets coming from the Internet are blocked.
Therefore, the RIP packets from the Internet might be dropped.
Block TCP flag scan