Abstract: A router stores a predetermined threshold of a first wide area network (WAN) port transmitting packets and connects to the Internet via the first WAN port. The router detects traffic values of transmitted packets through the first WAN port at different time points and stores the traffic values in the storage system. The router determines whether a current traffic value is equal to a previous traffic value, and determines whether the current traffic value is greater than the predetermined threshold of the first WAN port if the current traffic values are not equal to the previous traffic value. The router switches a connection between the first WAN port and the Internet to a connection between the second WAN port and the Internet if the current traffic value is greater than the predetermined threshold.

Abstract: A router and method for protecting transfer control protocol (TCP) ports of a local computer include receiving a SYN packet from a remote computer, recording a timestamp of the SYN packet, and counting a number of suspicious TCP connections established during a first time interval before the timestamp of the SYN packet. The router and method further include identifying the remote computer as an attacker if the counted number exceeds a preset maximum connection value, and rejecting all TCP packets transmitted from the remote computer during the second time interval after the timestamp of the SYN packet.