Table 100 Packet Filter Logs; Table 101 Icmp Logs; Table 102 Remote Management Logs - ZyXEL Communications NBG410W3G User Manual

Table 99 TCP Reset Logs (continued)
LOG MESSAGE
Exceed MAX incomplete,
sent TCP RST
Access block, sent TCP
RST

Table 100 Packet Filter Logs

LOG MESSAGE
[ TCP | UDP | ICMP | IGMP |
Generic ] packet filter
matched (set: %d, rule: %d)
F
or type and code details, see

Table 101 ICMP Logs

LOG MESSAGE
Firewall default policy: ICMP
<Packet Direction>, <type:%d>,
<code:%d>
Firewall rule [NOT] match: ICMP
<Packet Direction>, <rule:%d>,
<type:%d>, <code:%d>
Triangle route packet forwarded:
ICMP
Packet without a NAT table entry
blocked: ICMP
Unsupported/out-of-order ICMP:
ICMP
Router reply ICMP packet: ICMP

Table 102 Remote Management Logs

LOG MESSAGE
Remote Management: FTP denied
Remote Management: TELNET denied
Remote Management: HTTP or UPnP
denied
Remote Management: WWW denied
NBG410W3G Series User's Guide
DESCRIPTION
The router sent a TCP reset packet when the number of
incomplete connections (TCP and UDP) exceeded the user-
configured threshold. (Incomplete count is for all TCP and UDP
connections through the firewall.)Note: When the number of
incomplete connections (TCP + UDP) > "Maximum Incomplete
High", the router sends TCP RST packets for TCP connections
and destroys TOS (firewall dynamic sessions) until incomplete
connections < "Maximum Incomplete Low".
The router sends a TCP RST packet and generates this log if you
turn on the firewall TCP reset mechanism (via CI command: "sys
firewall tcprst").
DESCRIPTION
Attempted access matched a configured filter rule (denoted
by its set and rule number) and was blocked or forwarded
according to the rule.
Table 110 on page 321.
DESCRIPTION
ICMP access matched the default policy and was
blocked or forwarded according to the user's setting.
ICMP access matched (or didn't match) a firewall rule
(denoted by its number) and was blocked or forwarded
according to the rule.
The firewall allowed a triangle route session to pass
through.
The router blocked a packet that didn't have a
corresponding NAT table entry.
The firewall does not support this kind of ICMP packets
or the ICMP packets are out of order.
The router sent an ICMP reply packet to the sender.
DESCRIPTION
Attempted use of FTP service was blocked according to
remote management settings.
Attempted use of TELNET service was blocked
according to remote management settings.
Attempted use of HTTP or UPnP service was blocked
according to remote management settings.
Attempted use of WWW service was blocked according
to remote management settings.
Chapter 19 Logs Screens
315