Properties

PseudoReass_MaxConcurrent

Maximum number of concurrent fragment reassemblies. Set to 0 to drop all fragments. (Default: 2048)

IllegalFrags

Illegaly constructed fragments; partial overlaps, bad sizes, etc. (Default: DropLog)

DuplicateFragData

On receipt of duplicate fragments, verify matching data... (Default: Check8)

FragReassemblyFail

Failed packet reassembly attempts - due to timeouts or packet losses. (Default: LogSuspectSubseq)

DroppedFrags

Fragments of packets dropped due to rule base. (Default: LogSuspect)

DuplicateFrags

Duplicate fragments received. (Default: LogSuspect)

FragmentedICMP

Fragmented ICMP messages other than Ping; normally invalid. (Default: DropLog)

MinimumFragLength

Minimum allowed length of non-last fragments. (Default: 8)

ReassTimeout

Timeout of a reassembly, since previous received fragment. (Default: 65)

ReassTimeLimit

Maximum lifetime of a reassembly, since first received fragment. (Default: 90)

ReassDoneLinger

How long to remember a completed reassembly (watching for old dups). (Default: 20)

ReassIllegalLinger

How long to remember an illegal reassembly (watching for more fragments). (Default: 60)

IP6IllegalFrags

Illegaly constructed fragments; partial overlaps, bad sizes, etc. (Default: DropLog)

IP6DuplicateFragData

On receipt of duplicate fragments, verify matching data... (Default: Check8)

IP6FragReassemblyFail

Failed packet reassembly attempts - due to timeouts or packet losses. (Default: LogSuspectSubseq)

IP6DroppedFrags

Fragments of packets dropped due to rule base. (Default: LogSuspect)

IP6DuplicateFrags

Duplicate fragments received. (Default: LogSuspect)

IP6RejectBadFragLength

Send Parameter Problem error upon reception of fragments with bad data length. (Default: No)

IP6IgnoreStubFrags

Ignore fragments with M flag cleared and fragment offset zero. (Default: No)

IP6MinimumFragLength

Minimum allowed length of non-last fragments. (Default: 8)

IP6ReassTimeout

Timeout of a reassembly, since previous received fragment. (Default: 65)

IP6ReassTimeLimit

Maximum lifetime of a reassembly, since first received fragment. (Default: 90)

IP6ReassDoneLinger

How long to remember a completed reassembly (watching for old dups). (Default: 20)

IP6ReassIllegalLinger

How long to remember an illegal reassembly (watching for more fragments). (Default: 60)

IP6SendErrorOnTimeout

Send ICMPv6 error when a fragment reassembly time out. (Default: No)