P a g e | 62
UCM630X Series User Manual
Version 1.0.2.25
SYN Flood Defense will limit the amount of SYN packets accepted by the UCM
from one source to 10 packets per second. Any excess packets from that source
will be discarded.
Ping-of-Death
Defense Enable
Enable to prevent Ping-of-Death attack to the device. The default setting is
disabled. To enable or disable it, click on the check box for the LAN or WAN
(UCM630X) interface.
Under "Custom Firewall Settings", users could create new rules to accept, reject or drop certain traffic going
through the UCM630X. To create new rule, click on "Create New Rule" button and a new window will pop up for
users to specify rule options.
Right next to "Create New Rule" button, there is a checkbox for option "Reject Rules". If it is checked, all the
rules will be rejected except the firewall rules listed below. In the firewall rules, only when there is a rule that
meets all the following requirements, the option "Reject Rules" will be allowed to check:
Action: "Accept"
Type "In"
Destination port is set to the system login port (e.g., by default 8089)
Protocol is not UDP
Figure 29: Create New Firewall Rule