[steviej1974]

Hi, I have seen an old warning on DNS Binding attacks.

I assume dd-wrt has been hardened against this? Is there any other settings or firewall command I need to enable to protect the dd-wrt router?

Thanks

[Alozaros]

In general those attack's are typical if you have another router running after it LAN to WAN with NAT
Also DD WRT firewall is very versatile and solid
in security tab you can tick few boxes for DDoS attacks as well you can add few iptables commands... the thing is to know what you are doing and what to expect....

if you do nothing special with your router you can add those lines in administration>commands and save firewall...

iptables -t mangle -I PREROUTING -m conntrack --ctstate INVALID -j DROP
iptables -t mangle -I PREROUTING -p tcp ! --syn -m conntrack --ctstate NEW -j DROP
iptables -t mangle -I PREROUTING -p tcp -m conntrack --ctstate NEW -m tcpmss ! --mss 536:65535 -j DROP
iptables -I INPUT -s `nvram get lan_ipaddr`/`nvram get lan_netmask` -d `nvram get wan_ipaddr` -j DROP

there are also AD blocking scripts or Country Blocking scripts and so on and on ...variety of stuff...
last thing is make sure you are running a decent recent build...
ftp://ftp.dd-wrt.com/betas/