NETGEAR S3300 - Dns

Configure System Information
64
S3300 Smart Managed Pro Switch
• Denial of Service Max ICMPv6 Packet Size. Specify the maximum IPv6 ICMP
packet size allowed. If ICMPv6 DoS prevention is enabled, the switch will drop IPv6
ICMP ping packets that have a size greater than this configured maximum ICMPv6
packet size.
• Denial of Service First Fragment. Enabling First Fragment DoS prevention causes
the switch to check DoS options on first fragment IP packets when switch are
receiving fragmented IP packets. Otherwise, the switch ignores the first fragment IP
packages.
• Denial of Service ICMP Fragment. Enabling ICMP Fragment DoS prevention
causes the switch to drop ICMP fragmented packets.
• Denial of Service SIP=DIP. Enabling SIP=DIP DoS prevention causes the switch to
drop packets that have a source IP address equal to the destination IP address.
• Denial of Service SMAC=DMAC. Enabling SMAC=DMAC DoS prevention causes
the switch to drop packets that have a source MAC address equal to the destination
MAC address.
• Denial of Service TCP FIN&URG&PSH. Enabling TCP FIN & URG & PSH DoS
prevention causes the switch to drop packets that have TCP Flags FIN, URG, and
PSH set and TCP sequence number equal to 0.
• Denial of Service TCP Flag&Sequence. Enabling TCP Flag DoS prevention causes
the switch to drop packets that have TCP control flags set to 0 and TCP sequence
number set to 0.
• Denial of Service TCP Fragment. Enabling TCP Fragment DoS prevention causes
the switch to drop packets that have a TCP payload where the IP payload length
minus the IP header size is less than the minimum allowed TCP header size.
• Denial of Service TCP Offset. Enabling TCP Offset DoS prevention causes the
switch to drop packets that have a TCP header offset set to 1.
• Denial of Service TCP Port. Enabling TCP Port DoS prevention causes the switch to
drop packets that have TCP source port equal to TCP destination port.
• Denial of Service TCP SYN. Enabling TCP SYN DoS prevention causes the switch
to drop packets that have TCP flags SYN set.
• Denial of Service TCP SYN&FIN. Enabling TCP SYN & FIN DoS prevention causes
the switch to drop packets that have TCP flags SYN and FIN set.
• Denial of Service UDP. Enabling UDP Port DoS prevention causes the switch to drop
packets that have UDP source port equal to UDP destination port. The factory default
is disabled.
3. Click the Apply button.
DNS
You can use these screens to configure information about DNS servers the network uses and
how the switch operates as a DNS client.