Operation Manual

VigorBX 2000 Series User’s Guide
623
-e It means to enable defense function for a specific attack(s).
ATTACK_0 It means to specify a name of the following attacks: ip_option,
tcp_flag, land, teardrop, smurf, pingofdeath, traceroute,
icmp_frag, syn_frag, unknow_proto, fraggle.
-d It means to disable the defense function for a specific attack(s).
E
E
x
x
a
a
m
m
p
p
l
l
e
e
>dos –A
The Dos Defense system is Activated
>dos –s synflood 50 10
Synflood is enabled! Threshold=50 <pke/sec> timeout=10 <pke/sec>