Main |  Quick Start Wizard |  Documents |  Tools |  Tips |  Utilities
DoS/DDoS Issues

Defense Functions

The DoS/DDoS defense function can detect and protect the following attacks:
1. SYN flood attack
2. UDP flood attack
3. ICMP flood attack
4. TCP Flag scan
5. Trace route
6. IP options
7. Unknown protocol
8. Land attack
9. Smurf attack
10. SYN fragment
11. ICMP fragment
12. Tear drop attack
13. Fraggle attack
14. Ping of Death attack
15. TCP/UDP port scan

Cooperate with the IPFilter/Firewall

The DoS/DDoS defense provides the frontline of the security defense. It deal with the massive attack and malicious attacks. The stateful packet inspection firewall ensures that only legal sessions can pass.

Service Considerations

Activating DoS/DDoS defense functionality might block some legal packet. For example, when activate fraagle attack defense, all broadcst UDP packets come from the Internet are blocked. Therefore, the RIP packets from the Internet might be dropped.

More Information about the Configuration Please refer to the DoS/DDoS Manual as a section of the IPFilter/Firewall chapter.

Copyright (c) 2003, DrayTek Corp. All Rights Reserved.