Planet Technology G.SHDSL.bis Bridge Router GRT-504 - Manual (Page 71)

GRT-504 4-Wire G.SHDSL.bis Firewall Router User’s Manual
6.2.9.3 Advanced Firewall Security
Click Advanced Firewall Security and then press Finish.
A user can determine the security level for special purpose, environment and applications by
configuring the DoS protection and defining an extra packet filter with higher priority than the
default SPI filter. Please notice that an improper filter policy may degrade the capability of the
firewall and even block the normal network traffic.
It can set up the DoS protection parameters
SYN flood: A SYN flood is a form of denial-of-service attack, attempts to slow your network by
requesting new connections but not completing the process to open the connection. Once the
buffer for these pending connections is full a server will not accept any more connections and will
be unresponsive.
ICMP flood: A sender transmits a volume of ICMP request packets to cause all CPU resources to
be consumed serving the phony requests.
UDP Flood: A UDP flood attack is a denial-of-service (DoS) attack using the User Datagram
Protocol(UDP). A sender transmits a volume of requests for UDP diagnostic services which cause
all CPU resources to be consumed serving the phony requests.
70