General Setup - Draytek Vigor2950 Series User Manual

The below shows the attack types that DoS/DDoS defense function can detect:
1. SYN flood attack
2. UDP flood attack
3. ICMP flood attack
4. Port Scan attack
5. IP options
6. Land attack
7. Smurf attack
8. Trace route
Below shows the menu items for Firewall.
3 . 4 . 2 G e n e r a
3 . 4 . 2 G e n e r a
General Setup allows you to adjust settings of IP Filter and common options. Here you can
enable or disable the Call Filter or Data Filter. Under some circumstance, your filter set can
be linked to work in a serial manner. So here you assign the Start Filter Set only. Also you
can configure the Log Flag settings, Apply IP filter to VPN incoming packets, and Accept
incoming fragmented UDP packets.
Click Firewall and click General Setup to open the general setup page.
Call Filter
Data Filter
Start Filter Set
Action/Profile
Syslog
Vigor2950 Series User's Guide
l S e t u p
l S e t u p
Check Enable to activate the Call Filter function. Assign a start
filter set for the Call Filter.
Check Enable to activate the Data Filter function. Assign a start
filter set for the Data Filter.
Choose one of the filter sets as the base for call filer/data filter.
Select Pass or Block for the packets that do not match with the
filter rules.
For troubleshooting needs you can specify the filter log and/or CSM
log here by checking the box. The log will be displayed on Draytek
Syslog window.
9. SYN fragment
10. Fraggle attack
11. TCP flag scan
12. Tear drop attack
13. Ping of Death attack
14. ICMP fragment
15. Unknown protocol
53