User Manual of WDAP-C3000AX, WDAP-3000AX, WDAP-W3000AX
- 76 -
The SPI Firewall prevents attack and improper access to network
resources.
The default configuration is enabled.
SYN Flood is a popular attack way. DoS and DDoS are TCP protocols.
Hackers like using this method to make a fake connection that involves
the CPU, memory, and so on.
The default configuration is enabled.
If the function is enabled, when the number of the current FIN packets is
beyond the set value, the router will start the blocking function
immediately.
The default configuration is disabled.
If the function is enabled, when the number of the current UPD-FLOOD
packets is beyond the set value, the router will start the blocking function
immediately.
The default configuration is disabled.
ICMP is kind of a pack of TCP/IP; its important function is to transfer
simple signal on the Internet. There are two normal attack ways which
hackers like to use, Ping of Death and Smurf attack.
The default configuration is disabled.
If the function is enabled, the router will block Teardrop attack that is
targeting on TCP/IP fragmentation reassembly codes.
If the function is enabled, the router will block Ping of Death attack that
aims to disrupt a targeted machine by sending a packet larger than the
maximum allowable size causing the target machine to freeze or crash.
TCP packets with SYN and
FIN Bits set
Set the function as enable or disable
TCP packets with FIN Bit
set but no ACK Bit set
Set the function as enable or disable
TCP packets without Bits
set
Set the function as enable or disable
Enable the function to allow the Ping access from the Internet network.
The default configuration is disabled.
Enable the function to allow the web server access of the router from the
Internet network.
The default configuration is disabled.