ZyXEL Communications P-660HW-T - V2 User Manual page 312

P-660HW-T v2 User's Guide
Table 144 Firewall Commands (continued)
FUNCTION
Rules
312
COMMAND
Config edit firewall set <set
#> tcp-idle-timeout <seconds>
Config edit firewall set <set
#> log <yes | no>
Config edit firewall set <set
#> rule <rule #> permit
<forward | block>
Config edit firewall set <set
#> rule <rule #> active <yes |
no>
Config edit firewall set <set
#> rule <rule #> protocol
<integer protocol value >
Config edit firewall set <set
#> rule <rule #> log <none |
match | not-match | both>
Config edit firewall set <set
#> rule <rule #> alert <yes |
no>
config edit firewall set <set
#> rule <rule #> srcaddr-
single <ip address>
config edit firewall set <set
#> rule <rule #> srcaddr-
subnet <ip address> <subnet
mask>
config edit firewall set <set
#> rule <rule #> srcaddr-range
<start ip address> <end ip
address>
DESCRIPTION
This command sets how long ZyXEL Device
lets an inactive TCP connection remain open
before considering it closed.
This command sets whether or not the ZyXEL
Device creates logs for packets that match the
firewall's default rule set.
This command sets whether packets that
match this rule are dropped or allowed
through.
This command sets whether a rule is enabled
or not.
This command sets the protocol specification
number made in this rule for ICMP.
This command sets the ZyXEL Device to log
traffic that matches the rule, doesn't match,
both or neither.
This command sets whether or not the ZyXEL
Device sends an alert e-mail when a DOS
attack or a violation of a particular rule occurs.
This command sets the rule to have the
ZyXEL Device check for traffic with this
individual source address.
This command sets a rule to have the ZyXEL
Device check for traffic from a particular
subnet (defined by IP address and subnet
mask).
This command sets a rule to have the ZyXEL
Device check for traffic from this range of
addresses.
Appendix H Firewall Commands