fwaccel synatk -m

In the R81.10.X releases, this command is available starting from the R81.10.00 version.

Description

The "fwaccel synatk -m" and "fwaccel6 synatk -m" commands enable the Accelerated SYN Defender in the Monitor (Detect only) mode on all interfaces.

In this state, the Accelerated SYN Defender only sends a log when it recognizes a TCP SYN Flood attack.

Important - In a Cluster, you must configure all the Cluster Members in the same way.

Notes:

  • This command:

    1. Modifies the default configuration file $FWDIR/conf/synatk.conf, or the configuration file specified with the "-c" parameter.

    2. Loads the modified file.

  • Output of the fwaccel synatk monitor command shows:

    • Configuration: Monitoring

    • Enforce: Detect

    • State: Monitor

  • Output of the fwaccel synatk config command shows:

    • enabled 1

    • enforce 0

Syntax for IPv4

fwaccel synatk -m

Syntax for IPv6

fwaccel6 synatk -m