Hi, I am configuring my router DDoS Settings, but I'm not sure what to fill in, so I enabled all DDoS Defense settings, My PC is connected to a router, Draytek Vigor2200E, and my modem is a Motorola Surfboard 5100E, my connection speed is 2000 kbit/sec downstream and 520 kbit/sec upstream.

I have also selected that all packets should be 300 per second, so are these settings correct?



Enable DoS Defense
Enable SYN flood defense Threshold 300 packets / sec
Timeout 10 sec

Enable UDP flood defense Threshold 300 packets / sec
Timeout 10 sec

Enable ICMP flood defense Threshold 300 packets / sec
Timeout sec

Enable Port Scan detection Threshold 300 packets / sec

All these settings are ENABLED:
Block IP options
Block TCP flag scan
Block Land
Block Tear Drop
Block Smurf
Block Ping of Death
Block trace route
Block ICMP fragment
Block SYN fragment
Block Unknown Protocol
Block Fraggle Attack

you cant stop a DDoS attack, they usually exploit a weakness in the OS that causes a flood.

at its heart, a DDoS is basically a brute force attack, shove as many packets as possible up your network cable, and that will cut off other packets that would have gone to you, basically bringing that network connection to a halt.

those options stop a few things, personally i prefer to use iptables, but its all good, 300/sec does sound a bit high if the packets come from the same source, but if its a attack, it will keep some of it from reaching your computers.

Yes, I know, I also play multiplayer games on the Internet (MOHAA), and a gaming server will probably send a lot of data each second, (something like 80/40 kbit/sec) so that's the reason why I have set my settings to 300, however I will try to lower it and try to find a way to adjust it by lowering the packets without interrupting the game-servers which I game on.

If those timeout values represent the acual connection timeouts, then they're extremely short and you'll probably drop alot of connections.