AntiDDOS
From Wiki of WFilter NG Firewall
(Difference between revisions)
(Created page with "{{DISPLAYTITLE:Anti DDOS}} == Anti DDOS == "Anti DDOS" protects the WFilter server from DDOS attacks. == Settings == * Disable Ping on WAN Interfaces. * Drop Invalid Packet...") |
|||
| Line 17: | Line 17: | ||
[[File:antiddos001.png|900px]] | [[File:antiddos001.png|900px]] | ||
| − | Geo-IP Filter: filter connections from certain countries | + | Geo-IP Filter: filter connections from certain countries, options: |
* Block choosed countries | * Block choosed countries | ||
* Only allow choosed countries | * Only allow choosed countries | ||
Revision as of 13:56, 9 September 2019
1 Anti DDOS
"Anti DDOS" protects the WFilter server from DDOS attacks.
2 Settings
- Disable Ping on WAN Interfaces.
- Drop Invalid Packets.
- Drop Fragmented Packets.
- SYN Flood Protection, tcp syn packets exceed the rate limit will be dropped.
- UDP Flood Protection, udp packets exceed the rate limit will be dropped.
- ICMP Flood Protection, icmp packets exceed the rate limit will be dropped.
- Geo-IP Filter: filter connections from certain countries.
- IP Whitelist: whitelisted ip addresses won't be blocked by above rules.
Geo-IP Filter: filter connections from certain countries, options:
- Block choosed countries
- Only allow choosed countries
