ZyXEL Communications AMG1001-T Series, Руководство пользователя

Страница: 83 / 183

Chapter 13 Firewall
AMG1001-T/AMG1011-T Series User’s Guide
83
LAND Attack
In a LAND attack, hackers flood SYN packets into the network with a spoofed source IP address of
the target system. This makes it appear as if the host computer sent the packets to itself, making
the system unavailable while the target system tries to respond to itself.
Ping of Death
Ping of Death uses a "ping" utility to create and send an IP packet that exceeds the maximum
65,536 bytes of data allowed by the IP specification. This may cause systems to crash, hang or
reboot.
SPI
Stateful Packet Inspection (SPI) tracks each connection crossing the firewall and makes sure it is
valid. Filtering decisions are based not only on rules but also context. For example, traffic from the
WAN may only be allowed to cross the firewall in response to a request from the LAN.
13.2 The Firewall Screen
Use this screen to enable firewall and/or SPI. Click Advanced Setup > Firewall to display the
following screen.
Figure 44
Advanced Setup > Firewall
The following table describes the labels in this screen.
Enabling SPI blocks all traffic initiated from the WAN side, including the
DMZ, virtual server and ACL on the WAN side.
Table 32
Advanced > Firewall
LABEL DESCRIPTION
Firewall Use this field to enable or disable firewall on your AMG1001-T/AMG1011-T.
SPI Use this field to enable or disable SPI on your AMG1001-T/AMG1011-T.
SAVE Click this to save your changes.
CANCEL Click this to restore your previously saved settings.