ZyXEL Communications AMG1302-T10A User Manual page 210

Chapter 21 Logs
Table 81 System Error Logs
LOG MESSAGE
%s exceeds the max. number
of session per host!
setNetBIOSFilter: calloc
error
readNetBIOSFilter: calloc
error
WAN connection is down.
Table 82 Access Control Logs
LOG MESSAGE
Firewall default policy: [ TCP |
UDP | IGMP | ESP | GRE | OSPF ]
<Packet Direction>
Firewall rule [] match:[ TCP | UDP
| IGMP | ESP | GRE | OSPF ] <Packet
Direction>, <rule:%d>
Triangle route packet forwarded: [
TCP | UDP | IGMP | ESP | GRE | OSPF
]
Packet without a NAT table entry
blocked: [ TCP | UDP | IGMP | ESP |
GRE | OSPF ]
Router sent blocked web site
message: TCP
Table 83 TCP Reset Logs
LOG MESSAGE
Under SYN flood attack,
sent TCP RST
Exceed TCP MAX incomplete,
sent TCP RST
Peer TCP state out of order,
sent TCP RST
Firewall session time out,
sent TCP RST
210
DESCRIPTION
This attempt to create a NAT session exceeds the maximum number of
NAT session table entries allowed to be created per host.
The router failed to allocate memory for the NetBIOS filter settings.
The router failed to allocate memory for the NetBIOS filter settings.
A WAN connection is down. You can access the network through this
interface.
DESCRIPTION
Attempted TCP/UDP/IGMP/ESP/GRE/OSPF access matched
the default policy and was blocked or forwarded according to
the default policy's setting.
Attempted TCP/UDP/IGMP/ESP/GRE/OSPF access matched
(or did not match) a configured firewall rule (deed by its
number) and was blocked or forwarded according to the rule.
The firewall allowed a triangle route session to pass through.
The router blocked a packet that didn't have a corresponding
NAT table entry.
The router sent a message to notify a user that the router
blocked access to a web site that the user requested.
DESCRIPTION
The router sent a TCP reset packet when a host was under a SYN flood
attack (the TCP incomplete count is per destination host.)
The router sent a TCP reset packet when the number of TCP
incomplete connections exceeded the user configured threshold. (the
TCP incomplete count is per destination host.) e: Refer to TCP
Maximum Incomplete in the Firewall Attack Alerts screen.
The router sent a TCP reset packet when a TCP connection state was
out of order.e: The firewall refers to RFC793 Figure 6 to check the TCP
state.
The router sent a TCP reset packet when a dynamic firewall session
timed out.Default timeout values:ICMP idle timeout (s): 60UDP idle
timeout (s): 60TCP connection (three way handshaking) timeout (s):
30TCP FIN-wait timeout (s): 60TCP idle (established) timeout (s):
3600
AMG1302-T10A User's Guide