ZyXEL Communications ZyWall Reference Manual page 190

Chapter 22 IDP Commands
example, to search for signatures for Windows NT, Windows XP and Windows 2000 computers, then
type "12" as the platform parameter.
Table 106 Severity, Platform and Policy Type Command Values
SEVERITY
1 = Very Low
2 = Low
3 = Medium
4 = High
5 = Severe
The following table displays the command line service and action equivalent values. If you want to
combine services in a search, then add their respective numbers together. For example, to search
for signatures for DNS, Finger and FTP services, then type "7" as the service parameter.
Table 107 Service and Action Command Values
SERVICE
1 = DNS
2 = FINGER
4 = FTP
8 = MYSQL
16 = ICMP
32 = IM
64 = IMAP
128 = MISC
256 = NETBIOS
512 = NNTP
1024 = ORACLE
2048 = P2P
4096 = POP2
8192 = POP3
16384 = RPC
32768 = RSERVICES
190
PLATFORM POLICY TYPE
1 = All 1 = DoS
2 = Win95/98 2 = Buffer-Overflow
4 = WinNT 3 = Access-Control
8 = WinXP/2000 4 = Scan
16 = Linux 5 = Backdoor/Trojan
32 = FreeBSD 6 = Others
64 = Solaris 7 = P2P
128 = SGI 8 = IM
256 = Other-Unix 9 = Virtus/Worm
512 = Network-Device 10 = Porn
11 = Web-Attack
12 = Spam
SERVICE
65536 = SMTP
131072 = SNMP
262144 = SQL
524288 = TELNET
1048576 = TFTP
2097152 = n/a
4194304 = WEB_ATTACKS
8388608 = WEB_CGI
16777216 = WEB_FRONTPAGE
33554432 = WEB_IIS
67108864 = WEB_MISC
134217728 = WEB_PHP
268435456 = MISC_BACKDOOR
536870912 = MISC_DDOS
1073741824 = MISC_EXPLOIT
ACTION
1 = None
2 = Drop
4 = Reject-sender
8 = Reject-receiver
16 = Reject-both
ZyWALL (ZLD) CLI Reference Guide