Denial of Service Settings in SmartDefense

[mdelanoche]

Does anyone have this working and enabled on their firewall? The current settings if you enable "Denial of Service" looks like this:

Detect Denial of Service When:
More Than : 5 events were detected
over a period of : 360 seconds

Action: Alert

Is it okay to use these settings or is there another set of settings that should be used in conjunction with DOS attacks?

[intehnet]

should work fine.. is similar to what i usually put on when setting up smart defense.
it's only an alert, so if you have a webserver and it continually gets hammered but is not due to DoS, raise up the threshold and see how it goes.. no harm done.