D-Link D-Link Wireless ADSL Router Router User Manual


 
DSL-G624T Wireless A DSL Router User’s Guide
Firewall
The Firewall Configuration menu allows the Router to
enforce specific predefined policies intended to protect
against certain common types of attacks. There are two
general types of protection (DoS, Port Scan) that can be
enabled on the Router, as well as filtering for specific
packet types sometimes used by hackers.
You can choose to Enable or Disable protection against a
customized basket of attack and scan types. To enable
DoS Protection or Port Scan Protection, select the
Enable radio button for the protection type and click in
the selection boxes for the various types of protection
listed under each.
Note
Service Filtering may
interfere with other
configurations such as
DHCP Relay or
Remote Management
via Telnet.
Firewall Configuration Menu
When DoS, Port Scan, or Service Filtering Protection is enabled, it will create a firewall policy to protect your network
against the following:
Dos Protection Port Scan Protection Service Filtering
SYN Flood check
ICMP Redirection check
FIN/URG/PSH attack
Xmas Tree Scan
Null Scan attack
SYN/RST attack
SYN/FIN Scan
Ping from External Network
Telnet from External Network
FTP from External Network
DNS from External Network
A DoS "denial-of-service" attack is characterized by an explicit attempt by attackers to prevent legitimate users of a
service from using that service. Examples include: attempts to "flood" a network, thereby preventing legitimate network
traffic, attempts to disrupt connections between two machines, thereby preventing access to a service, attempts to
prevent a particular individual from accessing a service, or, attempts to disrupt service to a specific system or person.
Port scan protection is designed to block attempts to discover vulnerable ports or services that might be exploited in an
attack from the WAN.
The Service Filtering options allow you to block FTP, Telnet response, Pings, etc, from the external network. Check
the category you want to block to enable filtering of that type of packet.
When you have selected the desired Firewall policies, click the Apply button to enforce the policies. Remember to save
any configuration changes.
60