Description: Currently wsSwFirewallDoSChecksTable is handling the following configurable DoS Attacks:

1. Smurf DoS Attack: Enable this check in the firewall to drop ICMP echo packets destined to a broadcast IP address. Attackers use this type of packet to bring down a target host by spoofing its IP address and flooding it with ICMP echo responses.

2. Twinge DoS Attack: Enable this check in the firewall to drop false ICMP control packets going through the wirless switch.

3. Invalid IP Protocol DoS Attack: Enable this check in firewall to deny packets with invalid IP protocol value in the IP header. Some applications can use non-assigned IP protocol numbers to send malicious packets.

4. Ascend DoS Attack: Protocol is UDP, destination port is 9, UDP packet is mal-formed.

5. Chargen DoS Attack: The attack consists of a flood of UDP datagram's sent to the subnet broadcast address with the destination port set to 19 (chargen) and a spoofed source IP address.

6. Fraggle DoS Attack: When a perpetrator sends a large number of UDP echo (ping) traffic at IP broadcast addresses, all of it having a fake source address

7. ICMP Router Solicit DoS Attack: If the packet received from the network is an ICMP packet type 10 then it's an ICMP router discovery messages called Router Solicitations.

8. ICMP Router Advertisement DoS Attack: Enable this check in firewall to drop route advertisement packets. Route advertisements are used by neighboring hosts to configure their route table. These messages can be used by attackers to configure routes on hosts to re-direct traffic.

9. IP Source Route Option DoS Attack: Enable this check in firewall to drop packets with source route option set in IP header.

10. Snork DoS Attack: Enable this check in firewall to deny UDP or TCP packets with destination port set to 135 and source port set to either 7,19 or 135. This can cause packets to be exchanged indefinitely between the two hosts causing them to slow down.

11. FTP Bounce DoS Attack: Enable this check in firewall to drop FTP packets if the IP address encoded in the PORT command does not match the IP address of the FTP client.

12.TCP Intercept DoS Attack: Enable / disable TCP packet interception. This should be enabled for protection against TCP SYN flood attacks.

13. Bcast/Mcast Icmp DoS: By default we consider bcast-mcast ICMP as DoS and drop the packets.