beautypg.com

Edimax Technology BR-6214K User Manual

Page 37

background image

36



Whole system flood

System-wide DoS threshold for SYN/FIN/UDP/ICMP flooding.


Per-source IP flood

SYN/FIN/UDP/ICMP flooding threshold per host. Offending host would be blocked for
120 seconds (default) if Source IP Blocking is enabled.


Whole system FlowCnt Control

System-wide Flow Count Control for TCP/UDP or Both protocol.


Per-source IP FlowCnt Control

SYN/FIN/UDP/ICMP Flow Count Control per host. Offending host would be blocked for
120 seconds (default) if Source IP Blocking is enabled.


TcpUdpPortScan

Port scan detection. Sensitivity could be Low or High.


All DoS items

System-wide Dos detection.



Click <Apply> at the bottom of the screen to save the above configurations. You can now configure other advance
sections or start using the router (with the advance settings in place)

2.6.4 DMZ Host

If you have a local client PC that cannot run an Internet application (e.g. Games) properly from behind the NAT firewall,
then you can open the client up to unrestricted two-way Internet access by defining a DMZ Host. The DMZ function
allows you to re-direct all packets going to your WAN port IP address to a particular IP address in your LAN. The
difference between the virtual server and the DMZ function is that the virtual server re-directs a particular service/Internet
application to a particular LAN client/server, whereas DMZ re-directs all packets (regardless of services) going to your
WAN IP address to a particular LAN client/server.

Parameters Description


Enable DMZ

Enable/disable DMZ

Note: If there is a conflict between the Virtual Server and the DMZ setting, then Virtual
Server function will have priority over the DMZ function.

DMZ Host

Input the IP address of a particular host in your LAN that will receive all the packets
originally going to the WAN port/Public IP address above


Note
: You need to give your LAN PC clients a fixed/static IP address for DMZ to work
properly.


General L4 protocol forward

Check this to enable the general layer 4 protocol forwarding function.


ICMP forward

Check this to allow the ICMP packets forward to the DMZ host.