Chapter 14 Firewall
AMG1312-T10D User’s Guide
150
4
Network bandwidth.
5
Type of traffic for certain servers.
Reduce the threshold values if your network is slower than average for any of these factors
(especially if you have servers that are slow or handle many tasks and are often busy).
• If you often use P2P applications such as file sharing with eMule or eDonkey, it’s recommended
that you increase the threshold values since lots of sessions will be established during a small
period of time and the Device may classify them as DoS attacks.
14.5.2 Configuring Firewall Thresholds
Click
Security > Firewall > DoS > Advanced
to display the following screen.
Figure 107
Security > Firewall > DoS > Advanced
The following table describes the labels in this screen.
Table 66
Security > Firewall > DoS > Advanced
LABEL
DESCRIPTION
TCP SYN-Request
Count
This is the rate of new TCP half-open sessions per second that causes the firewall to
start deleting half-open sessions. When the rate of new connection attempts rises
above this number, the Device deletes half-open sessions as required to
accommodate new connection attempts.
UDP Packet Count
This is the rate of new UDP half-open sessions per second that causes the firewall to
start deleting half-open sessions. When the rate of new connection attempts rises
above this number, the Device deletes half-open sessions as required to
accommodate new connection attempts.
ICMP Echo-Request
Count
This is the rate of new ICMP Echo-Request half-open sessions per second that causes
the firewall to start deleting half-open sessions. When the rate of new connection
attempts rises above this number, the Device deletes half-open sessions as required
to accommodate new connection attempts.
ICMP Redirect
Select
Enable
to monitor for and block ICMP redirect attacks.
An ICMP redirect attack is one where forged ICMP redirect messages can force the
client device to route packets for certain connections through an attacker’s host.
DoS Log(Log Level:
DEBUG)
Select
Enable
to log DoS attacks. See
for information on
viewing logs.
Summary of Contents for AMG1312-T10D
Page 4: ...Contents Overview AMG1312 T10D User s Guide 4 ...
Page 12: ...Table of Contents AMG1312 T10D User s Guide 12 ...
Page 18: ...Chapter 1 Introduction AMG1312 T10D User s Guide 18 ...
Page 24: ...Chapter 2 Introducing the Web Configurator AMG1312 T10D User s Guide 24 ...
Page 74: ...Chapter 6 Wireless AMG1312 T10D User s Guide 74 ...
Page 100: ...Chapter 7 Home Networking AMG1312 T10D User s Guide 100 ...
Page 138: ...Chapter 13 Filter AMG1312 T10D User s Guide 138 ...
Page 158: ...Chapter 15 Parental Control AMG1312 T10D User s Guide 158 ...
Page 166: ...Chapter 16 Certificates AMG1312 T10D User s Guide 166 ...
Page 172: ...Chapter 17 System Monitor AMG1312 T10D User s Guide 172 ...
Page 174: ...Chapter 18 User Account AMG1312 T10D User s Guide 174 ...
Page 178: ...Chapter 20 System AMG1312 T10D User s Guide 178 ...
Page 184: ...Chapter 22 Log Setting AMG1312 T10D User s Guide 184 ...
Page 190: ...Chapter 24 Backup Restore AMG1312 T10D User s Guide 190 ...
Page 202: ...Chapter 25 Remote Management AMG1312 T10D User s Guide 202 ...
Page 206: ...Chapter 26 Diagnostic AMG1312 T10D User s Guide 206 ...
Page 218: ...Appendix A Legal Information AMG1312 T10D User s Guide 218 Environmental Product Declaration ...
