221
DoS Attack Type Description
Ping Of Death ICMP ECHO Request Packet whose sum of "Fragment Offset" and
"Total Length" fields in the IP header is greater than 65535 may cause
Ping of Death attack. As the maximum packet length of an IPv4 packet
including the IP header is 65,535 bytes, many computer systems could
not properly handle
this malformed or malicious ICMP ECHO Request
Packet. Thus, the hosts may break down or reboot automatically when
receive this kind of packet.
Table 13-1 Defendable DoS Attack Types
13.5.1 DoS Defend
On this page, you can enable the DoS Defend type appropriate to your need.
Choose the menu Network Security→DoS Defend→DoS Defend to load the following page.
Figure 13-18 DoS Defend
The following entries are displayed on this screen:
Defend Config
Allows you to Enable/Disable DoS Defend function.
Specify the transmission rate of the Ping packets when the Defend
Type Ping Flooding is enabled.
Specify the transmission rate of the SYN/SYN-
the Defend Type SYN/SYN-ACK Flooding is enabled.
Defend Table
Select the entry to enable the corresponding Defend Type.