5.8.6 Advanced Security
Using Advanced Security page (shown in figure 5-40), you can protect the router from being attacked by TCP- SYN Flood, UDP Flood and ICMP-Flood from LAN.
Figure 5-40 Advanced Security settings
•Packets Statistic interval (5 ~ 60) - The default value is 10. Select a value between 5 and 60 seconds in the pull-down list. The Packets Statistic interval value indicates the time section of the packets statistic. The result of the statistic used for analysis by SYN Flood, UDP Flood and ICMP-Flood.
•DoS protection - Enable or Disable the DoS protection function. Only when it is enabled, will the flood filters be effective.
•Enable ICMP-FLOOD Attack Filtering - Enable or Disable the ICMP-FLOOD Attack Filtering.
•ICMP-FLOOD Packets threshold: (5 ~ 3600) - The default value is 50. Enter a value between 5 ~ 3600 packets. When the current ICMP-FLOOD Packets numbers is beyond the set value, the router will start up the blocking function immediately.
•Enable UDP-FLOOD Filtering - Enable or Disable the UDP-FLOOD Filtering.
•UDP-FLOOD Packets threshold: (5 ~ 3600) - The default value is 500. Enter a value between 5 ~ 3600 packets. When the current UPD-FLOOD Packets numbers is beyond the set value, the router will start up the blocking function immediately.
•Enable TCP-SYN-FLOOD Attack Filtering - Enable or Disable the TCP-SYN- FLOOD Attack Filtering.
•TCP-SYN-FLOOD Packets threshold: (5 ~ 3600) - The default value is 50. Enter a value between 5 ~ 3600 packets. When the current TCP-SYN-FLOOD Packets numbers is beyond the set value, the router will start up the blocking function immediately.
•Ignore Ping Packet from WAN Port - Enable or Disable ignore ping packet from WAN port. The default is disabled. If enabled, the ping packet from the Internet cannot access the router.
Note: Please enable Curr��ent Statistics Status in System Tools > Statistics page to use the DOS Pr�otection, r�efer� to Chapter� 5.11.8
