35

2.6.3 Anti-DoS (Denial of Service)

The Broadband router's firewall can block common hacker attacks, including Denial of Service, Ping of Death, Port Scan

and Sync Flood, .etc. If Internet attacks occur the router can log the events.

Parameters

Description

DoS Prevention Enable

Enables selected Anti-DoS features.

Ignore LAN-Side Check

Skip DoS checks for all LAN

WAN packets.

Downloaded from

www.Manualslib.com

manuals search engine

36

Whole system flood

System-wide DoS threshold for SYN/FIN/UDP/ICMP flooding.

Per-source IP flood

SYN/FIN/UDP/ICMP flooding threshold per host. Offending host would be blocked for

120 seconds (default) if

Source IP Blocking

is enabled.

Whole system FlowCnt Control

System-wide Flow Count Control for TCP/UDP or Both protocol.

Per-source IP FlowCnt Control

SYN/FIN/UDP/ICMP Flow Count Control per host. Offending host would be blocked for

120 seconds (default) if

Source IP Blocking

is enabled.

TcpUdpPortScan

Port scan detection. Sensitivity could be Low or High.

All DoS items

System-wide Dos detection.

Click <

Apply>

at the bottom of the screen to save the above configurations. You can now configure other advance

sections or start using the router (with the advance settings in place)

2.6.4 DMZ Host

If you have a local client PC that cannot run an Internet application (e.g. Games) properly from behind the NAT firewall,

then you can open the client up to unrestricted two-way Internet access by defining a DMZ Host. The DMZ function

allows you to re-direct all packets going to your WAN port IP address to a particular IP address in your LAN. The

difference between the virtual server and the DMZ function is that the virtual server re-directs a particular service/Internet

application to a particular LAN client/server, whereas DMZ re-directs all packets (regardless of services) going to your

WAN IP address to a particular LAN client/server.

Parameters

Description

Enable DMZ

Enable/disable DMZ

Note

: If there is a conflict between the Virtual Server and the DMZ setting, then Virtual

Server function will have priority over the DMZ function.

DMZ Host

Input the IP address of a particular host in your LAN that will receive all the packets

originally going to the WAN port/Public IP address above

Note

: You need to give your LAN PC clients a fixed/static IP address for DMZ to work

properly.

General L4 protocol forward

Check this to enable the general layer 4 protocol forwarding function.

ICMP forward

Check this to allow the ICMP packets forward to the DMZ host.

Downloaded from

www.Manualslib.com

manuals search engine

37

Chapter 3

Status

The Status section allows you to monitor the current status of your router. You can use the Status page to monitor: the

connection status of the Broadband router's WAN/LAN interfaces, the current firmware and hardware version numbers,

any illegal attempts to access your network, and information on all DHCP client PCs currently connected to your network.

Parameters

Description

3.1 Status and Information

Shows the router’s system information

3.2 Logs

This router supports five types of Log messages: System Log, ACL Log, URL filter, DoS

Log and New connection Log.

Select one of the above Status selections and proceed to the manual’s relevant sub-section

Downloaded from

www.Manualslib.com

manuals search engine

38

3.1 Status and Information

The Status and Information section allows you to view the router’s system information

Parameters

Description

Information

You can see the router’s system information such as the router’s: System Information, LAN

Information, WAN Information, and Wireless Information.

Downloaded from

www.Manualslib.com

manuals search engine

39

3.2 Logs

This router supports five types of Log messages: System Log, ACL Log, URL filter, DoS Log and New connection Log.

You can Enable or Disable each of these Logs.

3.2.1 System Log

3.2.2 ACL Log

3.2.3 URL Filter Log

3.2.4 DoS Log

Downloaded from

www.Manualslib.com

manuals search engine