DoS/DDoS Issues
Defense Functions
The DoS/DDoS defense function can detect and protect the following attacks:
1. SYN flood attack
2. UDP flood attack
3. ICMP flood attack
4. TCP Flag scan
5. Trace route
6. IP options
7. Unknown protocol
8. Land attack
9. Smurf attack
10. SYN fragment
11. ICMP fragment
12. Tear drop attack
13. Fraggle attack
14. Ping of Death attack
15. TCP/UDP port scan
Cooperate with the IPFilter/Firewall
The DoS/DDoS defense provides the frontline of the security defense.
It deal with the massive attack and malicious attacks.
The stateful packet inspection firewall ensures that only legal sessions can pass.
Service Considerations
Activating DoS/DDoS defense functionality might block some legal packet.
For example, when activate fraagle attack defense, all broadcst UDP packets come from the Internet are blocked.
Therefore, the RIP packets from the Internet might be dropped.
More Information about the Configuration
Please refer to the DoS/DDoS Manual as a section of the IPFilter/Firewall chapter.
|