DoS Attack Type Description
Ping Of Death ICMP ECHO Request Packet whose sum of "Fragment Offset" and
"Total Length" fields in the IP header is greater than 65535 may cause
Ping of Death attack. As the maximum packet length of an IPv4 packet
including the IP header is 65,535 bytes, many computer systems could
not properly handle this malformed or malicious ICMP ECHO Request
Packet. Thus, the hosts may break down or reboot automatically when
receive this kind of packet.
Table 12-1 Defendable DoS Attack Types
12.4.1 DoS Defend On this page, you can enable the DoS Defend type appropriate to your need.
Choose the menu Network Security→DoS Defend→DoS Defend to load the following page.
Figure 12-17 DoS Defend
The following entries are displayed on this screen:
Defend Config
DoS Defend: Allows you to Enable/Disable DoS Defend function.
Ping Limiting: Specify the transmission rate of the Ping packets when the Defend
Type Ping Flooding is enabled.
SYN Limiting: Specify the transmission rate of the SYN/SYN-ACK packets when
the Defend Type SYN/SYN-ACK Flooding is enabled.
Defend Table
Select: Select the entry to enable the corresponding Defend Type.
208