Freedom9 freeGuard Blaze 2100, Руководство пользователя

Страница: 90 / 224

A T T A C K D E T E C T I O N A N D P R E V E N T I O N
Configuring the freeGuard Blaze 2100 to Defend Against DoS and DDoS
5-8
Security Appliance User Guide Version 3R2
5
Use the set zone command with the syn-flood attack threshold
option to set a limit on the number of SYN packets that a specific zone
can receive per second before being dropped:
set zone {zone name} screen syn-flood attack-threshold
{number}
E X A M P L E : S E T T I N G T H E S Y N F L O O D T H R E S H O L D
Set the SYN flood attack threshold to 5,000 on the untrust zone:
set zone untrust screen syn-flood attack-threshold 5000
save
G U I E X A M P L E : S E T T I N G T H E S Y N F L O O D T H R E S H O L D
1
Policy > Attack Settings Edit Zone (for “untrust”)
2
Enter the following, then click Apply :
SYN flood attack threshold: 5000
CONFIGURING FIN FLOOD PREVENTION
Setting a rate limit for FIN packets allows the appliance to detect and
prevent FIN flood attacks. Use the
set zone command with the fin-
flood attack threshold option to limit the number of FIN packets that a
specific zone can receive per second before being dropped:
set zone {zone name} screen fin-flood attack-threshold
{number}
E X A M P L E : S E T T I N G T H E F I N F L O O D T H R E S H O L D
Set the FIN flood threshold to 2,000 on the untrust zone:
set zone untrust screen fin-flood attack-threshold 2000
save
G U I E X A M P L E : S E T T I N G T H E F I N F L O O D T H R E S H O L D
1
Policy > Attack Settings Edit Zone (for “untrust”)
2
Enter the following, then click Apply :
FIN flood attack threshold: 2000