ZyXEL Communications AMG1302-T11C, Руководство пользователя

Страница: 167 / 307

Chapter 15 Firewall
AMG1302-T11C User’s Guide
167
Anti-Probing
If an outside user attempts to probe an unsupported port on your AMG1302-T11C, an ICMP
response packet is automatically returned. This allows the outside user to know the AMG1302-T11C
exists. The AMG1302-T11C supports anti-probing, which prevents the ICMP response packet from
being sent. This keeps outsiders from discovering your AMG1302-T11C when unsupported ports are
probed.
ICMP
Internet Control Message Protocol (ICMP) is a message control and error-reporting protocol
between a host server and a gateway to the Internet. ICMP uses Internet Protocol (IP) datagrams,
but the messages are processed by the TCP/IP software and directly apparent to the application
user.
DoS Thresholds
For DoS attacks, the AMG1302-T11C uses thresholds to determine when to drop sessions that do
not become fully established. These thresholds apply globally to all sessions. You can use the
default threshold values, or you can change them to values more suitable to your security
requirements.
15.2 The Firewall General Screen
Use this screen to select the firewall protection level on the AMG1302-T11C. Click Security >
Firewall > General to display the following screen.
Figure 82
Security > Firewall > General