Edimax Technology BR-6214K User Manual
Page 37
36
Whole system flood
System-wide DoS threshold for SYN/FIN/UDP/ICMP flooding.
Per-source IP flood
SYN/FIN/UDP/ICMP flooding threshold per host. Offending host would be blocked for
120 seconds (default) if Source IP Blocking is enabled.
Whole system FlowCnt Control
System-wide Flow Count Control for TCP/UDP or Both protocol.
Per-source IP FlowCnt Control
SYN/FIN/UDP/ICMP Flow Count Control per host. Offending host would be blocked for
120 seconds (default) if Source IP Blocking is enabled.
TcpUdpPortScan
Port scan detection. Sensitivity could be Low or High.
All DoS items
System-wide Dos detection.
Click <Apply> at the bottom of the screen to save the above configurations. You can now configure other advance
sections or start using the router (with the advance settings in place)
2.6.4 DMZ Host
If you have a local client PC that cannot run an Internet application (e.g. Games) properly from behind the NAT firewall,
then you can open the client up to unrestricted two-way Internet access by defining a DMZ Host. The DMZ function
allows you to re-direct all packets going to your WAN port IP address to a particular IP address in your LAN. The
difference between the virtual server and the DMZ function is that the virtual server re-directs a particular service/Internet
application to a particular LAN client/server, whereas DMZ re-directs all packets (regardless of services) going to your
WAN IP address to a particular LAN client/server.
Parameters Description
Enable DMZ
Enable/disable DMZ
Note: If there is a conflict between the Virtual Server and the DMZ setting, then Virtual
Server function will have priority over the DMZ function.
DMZ Host
Input the IP address of a particular host in your LAN that will receive all the packets
originally going to the WAN port/Public IP address above
Note: You need to give your LAN PC clients a fixed/static IP address for DMZ to work
properly.
General L4 protocol forward
Check this to enable the general layer 4 protocol forwarding function.
ICMP forward
Check this to allow the ICMP packets forward to the DMZ host.