This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
advanced-firewall [2023/05/28 04:26] – [Firewall] hogwild | advanced-firewall [2023/05/28 04:35] – [Firewall] -formatting hogwild | ||
---|---|---|---|
Line 8: | Line 8: | ||
{{: | {{: | ||
- | | + | \\ **WAN interfaces respond to ping and traceroute: |
**Limit communication to: **This specifies the maximum number of requests per second to which the Firewall will reply. Setting a limit number is recommended to prevent DDoS attacks.\\ | **Limit communication to: **This specifies the maximum number of requests per second to which the Firewall will reply. Setting a limit number is recommended to prevent DDoS attacks.\\ | ||
- | | + | **Enable TCP SYN cookies: |
**Enable DCSP Fix: **Checking this enables a workaround for packet marking, a well-known issue related to DSCP when connected to Comcast. | **Enable DCSP Fix: **Checking this enables a workaround for packet marking, a well-known issue related to DSCP when connected to Comcast. | ||
Line 55: | Line 55: | ||
**Enable quick leave** - This is a feature of IGMP v2 and later. Enabling this allows the router to stop streaming multicast to an IP address as soon as that device sends a "quick leave" IGMP packet. | **Enable quick leave** - This is a feature of IGMP v2 and later. Enabling this allows the router to stop streaming multicast to an IP address as soon as that device sends a "quick leave" IGMP packet. | ||
- | **Custom Configuration** - This option allows you to set up advanced parameters for the IGMP proxy daemon. | + | **Custom Configuration** - This option allows you to set advanced parameters for the IGMP proxy daemon. |
\\ {{: | \\ {{: | ||
Line 71: | Line 71: | ||
**Udpxy port**- This specifies the port on which you can recive Udpxy information from your router.\\ | **Udpxy port**- This specifies the port on which you can recive Udpxy information from your router.\\ | ||
- | **Efficient Multicast Forwarding (IGMP Snooping) -** IGMP snooping | + | **Efficient Multicast Forwarding (IGMP Snooping) -** IGMP snooping |
+ | |||
+ | therefore, multicast network misconfiguration or other deficiencies can appear as UPnP issues rather than underlying network issues. If IGMP snooping is enabled on a switch, or more commonly a wireless router/ | ||
**Force IGMPv2** - IGMPv2 enhances the IGMP communication supporting additional messages/ | **Force IGMPv2** - IGMPv2 enhances the IGMP communication supporting additional messages/ | ||