terminology
this section lists terminology used in this guide.
dhcp — dynamic host configuration protocol. this is a protocol that lets network administrators manage centrally and automate the assignment of internet protocol addresses in an organization's network from a server on the network.
dmz — demilitarized zone port. the officeconnect
dos attacks — denial of service attacks. an attempt to stop one of your services running, such as a web or ftp server. there are several kinds of dos attacks.internet firewall dmz has an extra port. if you connect publicly-accessible servers and workstations to this port, they are accessible from the internet but still protected from dos attacks
ip address — the internet protocol address is the network layer address of a device assigned by the user or network administrator of an ip network. an ip address consists of 32 bits divided into two or three fields: a network number and a host number or a network number, a subnet number, and a host number.
ip spoof — a type of dos attack. an ip spoof uses a fake ip address to bypass security settings which may bar access from the real ip address.
irc — internet relay chat. provides a way of communicating in real time with people from all over the world.
isp — internet service provider. a business that provides internet access to individuals or organizations.
internet firewall — used in this guide to refer to both the officeconnect internet firewall 25 and the officeconnect internet firewall dmz.
land attack — a type of dos attack. in a land attack, a packet is sent that appears to come from the same address and port that it is sent to. this can hang the machine to which it is sent.
management station — this is the workstation from which you run the web-based management interface for the internet firewall.
management interface — this is the web-based application which you use to set up the internet firewall to protect your network from attack and to control access to the internet for lan users.
nat — network address translation. nat refers to the process of converting the ip addresses used within a private network to internet ip addresses.
nntp — network news transfer protocol. this protocol is used to distribute usenet news articles over the internet.
ping of death — a type of dos attack. the internet protocol (ip) defines the maximum size for a ping packet.
however, some ping programs can send packets that are larger than this size which can cause some systems to crash.
pppoe — point to point protocol over ethernet. ppp is the internet standard for transmission of ip packets over serial lines. pppoe is a version of this protocol that operates over ethernet.
syn flood — a type of dos attack. this is where a client opens a connection with a server but does not complete it. if the server queue fills up with partially-open connections, no other clients can make genuine connections to that server.
utc —stands for “universal time co-ordinated”, and is the standard time common to all places in the world. it is also commonly referred to as gmt or world time.
web site filter — abbreviation for the officeconnect web site filter.