Draytek Vigor3910 Series, Руководство пользователя

Страница: 240 / 627

Vigor3910 Series User’s Guide 230
I
I
V
V
-
-
1
1
-
-
3
3
D
D
e
e
f
f
e
e
n
n
s
s
e
e
S
S
e
e
t
t
u
u
p
p
As a sub-functionality of IP Filter/Firewall, there are 15 types of detect/ defense function in
the DoS Defense setup. The DoS Defense functionality is disabled for default.
I I V V - - 1 1 - - 3 3 - - 1 1 D D o o S S D D e e f f e e n n s s e e
Click Firewall and click Defense Setup to open the setup page.
Available settings are explained as follows:
Item Description
Enable Dos Defense Check the box to activate the DoS Defense Functionality.
Select All - Click this button to select all the items listed
below.
White/Black List Option – Set white/black list of IPv4/IPv6
address.
Enable SYN flood defense Check the box to activate the SYN flood defense function.
Once detecting the Threshold of the TCP SYN packets from
the Internet has exceeded the defined value, the Vigor
router will start to randomly discard the subsequent TCP
SYN packets for a period defined in Timeout. The goal for
this is prevent the TCP SYN packets’ attempt to exhaust the
limited-resource of Vigor router.
By default, the threshold and timeout values are set to
2000 packets per second and 10 seconds, respectively. That
means, when 2000 packets per second received, they will
be regarded as “attack event” and the session will be
paused for 10 seconds.