Appendix; Firewall; Firewall Feature List - D-Link DVX-1000 User Manual

Appendix A - Appendix

Firewall Feature List

• Blocking malicious DHCP Server
• Allowing/blocking SIP packets
• Allowing/blocking RTP/RTCP packets
• Refusing directed broadcast
• Refusing limited broadcast
• Disallowing packets which can be used for port scanning, based on
• All bits of TCP flag are cleared
• SYN & FIN bits set
• SYN & RST bits set
• FIN & RST bits sets
• FIN set while ACK is not
• PSH set while ACK is not
• URG set while ACK is not
• SYN Flood attack where out of SYN, ACK and RST bits only SYN is set
• Enabling broadcast echo protection
• Disable source routed packets
• Enabling TCP SYN cookie protection
• Disable ICMP Redirect Acceptance
• Disable sending ICMP redirect messages
• Refuse connection from IANA-reserved blocks
• Allowing source quench messages (ICMP)
• Allowing parameter problem messages (ICMP)
• Allowing destination unreachable, service unavailable messages (ICMP)
• Allowing time exceeded messages (ICMP)
• Allowing ping (ICMP)
D-Link DVX-1000 User Manual

Appendix

Firewall