ATL Telecom AM2 - Manual (Page 84)

ATL User Guide
AM2 G.SHDSL Modem 84
Packet Filtering
The packet filtering function can be configured by the pkt_filter command. Move the cursor to pkt_filter
command and press the enter key. The following sub-menu will be displayed
>> active Tigger packet filtering function
drop_flag Drop fragment packets
add Add packet filtering rule
delete Delete packet filtering rule
modify Modify packet filtering rule
exchange Exchange the filtering rule
list Show packet filtering table
To enable the packet filtering function use the active command.
To add the packet filtering rule use the add command. The following sub-menu will be displayed.
>> protocol Configure protocol type
direction Configure direction mode
src_ip Configure source IP parameter
dest_ip Configure destination IP parameter
port Configure port parameter (TCP and UDP only)
tcp_flag Configure TCP flag (TCP only)
icmp_type Configure ICMP flag (ICMP only)
description Packet filtering rule description
enable
Enable the packet filtering rule
begin The schedule of beginning time
end The schedule of ending time
action Configure action mode
DoS Protection
The DoS protection parameters can be configured in the dos_protection menu. Move the cursor to
dos_protection command and press the enter key.
>> syn_flood Enable protection SYN flood attack
icmp_flood Enable protection ICMP flood attack
udp_flood Enable protection UDP flood attack
ping_death Enable protection ping of death attack
land_attack Enable protection land attack
ip_spoff Enable protection IP spoofing attack
smurf_attack Enable protection smurf attack
fraggle_attack Enable protection fraggle attack