[search quickly] in condition of àNAT of statistic of àNAT of WebUIà system condition, can see “IP address ” has a lot of not to attribute net of IP of the net inside this inside column paragraph user:
In information of statistic of user of à of statistic of user of à of WebUIà system condition, can see safe gateway receives some user (192.168.0.67/24) sent huge data package, but the data parcel of safe gateway hair to this user is very small, according to this judgement this user may be in do fabricate source address charge.
[settle way]
1, will medium the lead plane of virus from inside the net disconnects, reduce toxin.
2, allow only in strategy of safe gateway configuration inside the net of the net paragraph join safety net closes, make safe gateway active reject the TCP that forged source address gives out to join:
1) management of group of à of WebUIà advanced configuration, build “all” of a working group (can define a name oneself) , include whole network paragraph all IP address (192.168.0.1- - 192.168.0.254) .
Attention: Here user local area network paragraph for 192.168.0.0/24, the user should go according to the IP address Duan Jin that uses actually group IP address paragraph appoint.
2) strategy of business of à of government of business of à of WebUIà advanced configuration is configured, build politic “pemit” (can define a name oneself) , allow ” of “all working group to arrive all target address (0.0.0.1-255.255.255.255) visit, undertake configuration according to next graphs, save.