D-Link DVX 1000 Product Manual - Page 83

Appendix A - Appendix Appendix Firewall Firewall Feature List • Blocking malicious DHCP Server • Allowing/blocking SIP packets • Allowing/blocking RTP/RTCP packets • Refusing directed broadcast • Refusing limited broadcast • Disallowing packets which can be used for port scanning, based on • All bits of TCP flag are cleared • SYN & FIN bits set • SYN & RST bits set • FIN & RST bits sets • FIN set while ACK is not • PSH set while ACK is not • URG set while ACK is not • SYN Flood attack where out of SYN, ACK and RST bits only SYN is set • Enabling broadcast echo protection • Disable source routed packets • Enabling TCP SYN cookie protection • Disable ICMP Redirect Acceptance • Disable sending ICMP redirect messages • Refuse connection from IANA-reserved blocks • Allowing source quench messages (ICMP) • Allowing parameter problem messages (ICMP) • Allowing destination unreachable, service unavailable messages (ICMP) • Allowing time exceeded messages (ICMP) • Allowing ping (ICMP) D-Link DVX-1000 User Manual 83