By controlling ICMP packets and IP packets carrying route options, you can effectively defend against attacks by sending these packets on the network.
The route options in an IP packet can be used to diagnose link faults and temporarily transmit special services. Network attackers may use packets carrying route options to probe the network structure and launch attacks. Therefore, by configuring whether to process IP packets carrying route options, you can effectively defend against attacks by sending these packets.
Network attackers perform scanning by using various types of packets, and devices reply to these packets with ICMP packets. Network attackers then obtain network information from these received ICMP packets and launch attacks on the network. In addition, the devices are busy sending ICMP packets, affecting transmission of normal service packets. By controlling the sending and receiving of ICMP packets, you can effectively defend against attacks by sending these packets.