Chapter 5
Setup and Configuration
RUGGEDCOM ROX II
User Guide
240 Configuring ICMP Control
Figure 251: System Control Form
1. Ignore ICMP ALL Check Box 2. Ignore ICMP Broadcast Check Box 3. TCP Syn Cookies Check Box 4. Send ICMP Redirect
Check Box
3. Configure the following parameter(s) as required:
NOTE
ICMP redirect messages are sent by routers to hosts to inform them when a better route is
available for a particular destination. However, before enabling ROX II to send ICMP messages,
be aware that ICMP redirects are simple to forge, allowing attackers to control the path by which
packets are forwarded, and are sometimes considered a security risk. Send ICMP redirect
messages only when appropriate.
Parameter Description
Ignore ICMP ALL Default: false
Ignores all ICMP echo requests sent to it.
Ignore ICMP Broadcast Default: true
Ignores all ICMP ECHO and TIMESTAMP requests sent to it via broadcast/multicast.
TCP Syn Cookies Default: false
Sends out syncookies when the syn backlog queue of a socket overflows. This is to
prevent against the common 'SYN flood attack'.
Send ICMP Redirect Default: true
Sends the ICMP redirect.
4. Click Commit to save the changes or click Revert All to abort. A confirmation dialog box appears. Click OK
to proceed.
5. Click Exit Transaction or continue making changes.
To Next Page
Loading...
