TRENDnet TWG-BRF114, Руководство пользователя, Страница: 82 / 88

Broadband Router User Guide
Security
This screen allows you to set Firewall and other security-related options.
Figure 48: Security Screen
Data - Security Screen
DoS Firewall
Enable DoS
Firewall
If enabled, DoS (Denial of Service) attacks will be detected and
blocked. The default is enabled. It is strongly recommended that this
setting be left enabled.
Note:
•
A DoS attack does not attempt to steal data or damage your PCs,
but overloads your Internet connection so you can not use it - the
service is unavailable.
•
This device uses "Stateful Inspection" technology. This system
can detect situations where individual TCP/IP packets are valid,
but collectively they become a DoS attack.
Firewall Settings
Button If you wish to adjust the settings used by the DoS firewall, click this
button to open a sub-window.
Options
Respond to ICMP
The ICMP protocol is used by the "ping" and "traceroute" programs,
and by network monitoring and diagnostic programs.
•
If checked, the Broadband Router will repond to ICMP packets
received from the Internet.
•
If not checked, ICMP packets from the Internet will be ignored.
Disabling this option provides a slight increase in security.
Allow VPN
Passthrough
The IPSec, PPTP, and L2TP protocols are used to establish a secure
connection, and are widely used by VPN (Virtual Private Network-
ing) programs.
•
If checked, these VPN connections are allowed.
•
If not checked, these VPN connections are blocked.
Note: IPSec sessions must NOT use AH (Authentication Header).
Packets using AH cannot be routed correctly.
Drop fragmented
IP packets If enabled, fragmented IP packets are discarded, forcing re-
transmission of these packets. In some situations, this could prevent
successful communication.
80