17.2 Special Security Settings
Prev | Chapter 17 Advanced security features | Next

## 17.2 Special Security Settings

WinRoute provides several security options which cannot be defined by traffic rules. These options can be set in the Security settings tab of the Configuration → Advanced Options section.

Figure 17.4. Security options — Anti-Spoofing and cutting down number of connections for one host

### Anti-Spoofing

Anti-Spoofing checks whether only packets with allowed source IP addresses are received at individual interfaces of the WinRoute host. This function protects WinRoute host from attacks from the internal network that use false IP addresses (so called spoofing).

For each interface, any source IP address belonging to any network connected to the interface is correct (either directly or using other routers). For any interface connected to the Internet (so called external interface), any IP address which is not allowed at any other interface is correct.

Detailed information on networks connected to individual interfaces is acquired in the routing table.

The Anti-Spoofing function can be configured in the Anti-Spoofing folder in Configuration → Advanced Options.

Enable Anti-Spoofing

  This option activates Anti-Spoofing.

Log

  If this option is on, all packets that have not passed the anti-spoofing rules will be logged in the Security log (for details see chapter 22.11 Security Log).

### Connections Count Limit

This function defines a limit for the maximum number of connections which can be established from one local host (workstation) to the Internet. This feature can be set in the lower section of the Security Settings under Configuration → Advanced Options. If sum of all connections from a single host to individual servers in the Internet reaches the set value, WinRoute blocks other connections.

Connections count limit is useful especially when a local client host is attacked by a worm or Trojan horse which attempts to establish connections to larger number of various servers. Connection count limits protects the firewall (the WinRoute host) from flooding and it can reduce undesirable activities by worms and Trojan horses.

Note: This feature does not limit number of connections coming in from the Internet (such as access to mapped services). Limiting of number of connections to a service would increase risk of so called DoS attack (overloading of a service by establishing of large number of concurrent connections).

Prev | Up | Next
17.1 P2P Eliminator | Contents | Chapter 18 Other settings