ZyXEL Communications ZyWall 10 Reference Manual page 63

FUNCTION
Config edit firewall set <set #>
rule <rule #> active <yes | no>
Config edit firewall set <set #>
rule <rule #> protocol <integer
protocol value >
Config edit firewall set <set #>
rule <rule #> log <none | match |
not-match | both>
Config edit firewall set <set #>
rule <rule #> alert <yes | no>
config edit firewall set <set #>
rule <rule #> srcaddr-single <ip
address>
config edit firewall set <set #>
rule <rule #> srcaddr-subnet <ip
address> <subnet mask>
config edit firewall set <set #>
rule <rule #> srcaddr-range <start
ip address> <end ip address>
config edit firewall set <set #>
rule <rule #> destaddr-single <ip
address>
config edit firewall set <set #>
rule <rule #> destaddr-subnet <ip
address> <subnet mask>
Firewall Commands
ZyWALL 10~100 Series Internet Security Gateway
Chart 10-1 Firewall Commands
COMMAND DESCRIPTION
This command sets whether a rule is enabled or
not.
This command sets the protocol specification
number made in this rule for ICMP.
This command sets the ZyWALL to log traffic that
matches the rule, doesn't match, both or neither.
This command sets whether or not the ZyWALL
sends an alert e-mail when a DOS attack or a
violation of a particular rule occurs.
This command sets the rule to have the ZyWALL
check for traffic with this individual source address.
This command sets a rule to have the ZyWALL
check for traffic from a particular subnet (defined by
IP address and subnet mask).
This command sets a rule to have the ZyWALL
check for traffic from this range of addresses.
This command sets the rule to have the ZyWALL
check for traffic with this individual destination
address.
This command sets a rule to have the ZyWALL
check for traffic with a particular subnet destination
(defined by IP address and subnet mask).
10-5