Draytek VigorSwitch P1085, Руководство пользователя, Страница: 183 / 267

VigorSwitch P1085 User’s Guide 175
 <config># dos icmpv6-ping-max-check
dos ipv6-min-frag-size-check Check minimum size of IPv6 fragments.
Related Syntax:

<config># dos ipv6-min-frag-size-check
dos
ipv6-min-frag-size-length
<0-65535>
Set the minimum packet size of IPv6 fragmented packets.
<0-65535> - Specify a packet number.
Related Syntax:

<config># dos ipv6-min-frag-size-length <0-65535>
dos land-deny Drop the packets if the source IP address equals to destination IP
address.
Related Syntax:
 <config># dos land-deny
dos nullscan-deny Drop the packets if attacked by NULL Scan.
Related Syntax:
 <config># dos nullscan-deny
dos pod-deny Drop the packets if attacked by Ping of Death.
Related Syntax:

<config># dos pod-deny
dos smurf-deny Drop the packets if encountered Smurf attack.
Related Syntax:

<config># dos smurf-deny
dos smurf-netmask Set the smurf attack size.
<0-32> - Enter a number as smurf attacks size.
Related Syntax:

<config># dos smurf-netmask <0-32>
dos syn-sportl1024-deny Drop SYN packets with sport less than 1024.
Related Syntax:
 <config># dos syn-sportl1024-deny
dos synfin-deny Drop the packets with SYN and FIN bits set.
Related Syntax:
 <config># dos synfin-deny
dos synrst-deny Drop the packets with SYNC and RST bits set.
Related Syntax:

<config># dos synrst-deny
dos tcp-frag-off-min-check Drop the TCP fragmented packet with offset equals to the minimum
packet size.
Related Syntax:
 <config># dos tcp-frag-off-min-check
dos tcpblat-deny Drop the packets if the source TCP port equals to destination TCP
port.
Related Syntax:

<config># dos tcpblat-deny
dos tcphdr-min-check Check the minimum TCP header and drop the TCP packets with the
header smaller than the minimum size defined.
Related Syntax:
 <config># dos tcphdr-min-check
dos tcphdr-min-length Set the minimum size of TCP header.
<0-65535> - Specify a packet number.
Related Syntax:
 <config># dos tcphdr-min-length <0-65535>