SMC Networks SMC7204BRA manual Configuring Firewall Settings

Configuring Firewall Settings

2.Configure any of the following settings that figure in the [Firewall Global Information] table:

Field	Description
Blacklist Status:	If you want the device to maintain and use a black list,
	click [Enable]. Click [Disable] if you do not want to maintain
	a list.
Blacklist Period(min):	This field specifies the number of minutes that a
	computer'sIP address will remain on the black list (i.e., all
	traffic originating from that computer will be blocked from
	passing through any interface on the ADSL Barricade).
	For more information, see Managing the Black List on
	page 134.
Attack Protection:	Click the [Enable] radio button to use the built-in firewall
	protections that prevent the following common types of
	attacks.
	IP Spoofing: Sending packets over the WAN interface
	using an internal LAN IP address as the source address.
	Tear Drop: Sending packets that contain overlapping
	fragments.
	Smurf and Fraggle: Sending packets that use the WAN or
	LAN IP broadcast address as the source address.
	Land Attack: Sending packets that use the same address
	as the source and destination address.
	Ping of Death: Illegal IP packet length.
Dos Protection:	Click the [Enable] radio button to use the following denial
	of service protections: SYN DoS, ICMP DoS, Per-host
	DoS protection.
Max Half open TCP	This field sets the percentage of concurrent IP sessions
Conn.:	that can be in the half-open state. In ordinary TCP
	communication, packets are in the half-open state only
	briefly as a connection is being initiated; the state
	changes to active when packets are being exchanged, or
	closed when the exchange is complete. TCP connections
	in the half-open state can use up the available IP
	sessions. If the percentage is exceeded, then the half-open
	sessions will be closed and replaced with new sessions
	as they are initiated.

132