ZyXEL Communications VANTAGE REPORT Manual page 485

Table 213 TCP Reset Logs (continued)
LOG MESSAGE
Exceed MAX incomplete,
sent TCP RST
Access block, sent TCP
RST
Table 214 Packet Filter Logs
LOG MESSAGE
[ TCP | UDP | ICMP | IGMP |
Generic ] packet filter
matched (set: %d, rule: %d)
or type and code details, see
F
Table 215 ICMP Logs
LOG MESSAGE
Firewall default policy: ICMP
<Packet Direction>, <type:%d>,
<code:%d>
Firewall rule [NOT] match: ICMP
<Packet Direction>, <rule:%d>,
<type:%d>, <code:%d>
Triangle route packet forwarded:
ICMP
Packet without a NAT table entry
blocked: ICMP
Unsupported/out-of-order ICMP:
ICMP
Router reply ICMP packet: ICMP
Vantage Report User's Guide
Appendix C ZyNOS Log Descriptions
DESCRIPTION
The router sent a TCP reset packet when the number of
incomplete connections (TCP and UDP) exceeded the
user-configured threshold. (Incomplete count is for all TCP
and UDP connections through the firewall.)Note: When
the number of incomplete connections (TCP + UDP) >
"Maximum Incomplete High", the router sends TCP RST
packets for TCP connections and destroys TOS (firewall
dynamic sessions) until incomplete connections <
"Maximum Incomplete Low".
The router sends a TCP RST packet and generates this log
if you turn on the firewall TCP reset mechanism (via CI
command: "sys firewall tcprst").
DESCRIPTION
Attempted access matched a configured filter rule
(denoted by its set and rule number) and was blocked
or forwarded according to the rule.
Table 229 on page 498.
DESCRIPTION
ICMP access matched the default policy and was
blocked or forwarded according to the user's
setting.
ICMP access matched (or didn't match) a firewall
rule (denoted by its number) and was blocked or
forwarded according to the rule.
The firewall allowed a triangle route session to
pass through.
The router blocked a packet that didn't have a
corresponding NAT table entry.
The firewall does not support this kind of ICMP
packets or the ICMP packets are out of order.
The router sent an ICMP reply packet to the
sender.
485