Hirschmann HiSecOS EAGLE20 - Page 182

Network Security > DoS > Global
Network Security
182
RM GUI HiSecOS EAGLE20/30
Release 3.0 09/2015
 IP
This frame allows you to activate or deactivate the land attack filter. With
the land attack method, the attacking station sends data packets whose
source and destination addresses are identical to those of the recipient.
When you activate this filter, the device detects data packets with identical
source and destination addresses and discards these.
 ICMP
This dialog provides you with filter options for the following ICMP
parameters:
 Fragmented data packets
 ICMP packets from a specific size upwards
Parameters Meaning
Activate Land
Attack Filter
Activates/deactivates the land attack scan.
Possible values:
 marked
The device detects incoming IP data packets whose source and
destination IP address are identical and discards them.
 unmarked (default setting)
The land attack scan is inactive.
Parameters Meaning
Filter Fragmented
Packets
Activates/deactivates the filter for fragmented ICMP packets.
Possible values:
 marked
The device detects fragmented ICMP packets and discards these.
 unmarked (default setting)
The filter for fragmented ICMP packets is inactive.