AudioCodes MP-202 User Manual page 166

Blocked Events
•
All Blocked Connection Attempts - Write a log message for each blocked attempt
to establish an inbound connection to the home network or vice versa. You can
enable logging of blocked packets of specific types by disabling this option, and
enabling some of the more specific options below it.
•
Specific Events - Specify the blocked events that should be monitored. Use this
to monitor specific event such as SynFlood. A log message will be generated if
either the corresponding check-box is checked, or the check-box 'All Blocked
Connection Attempts' is checked.
Other Events
•
Remote Administration Attempts - Write a log message for each remote-
administration connection attempt, whether successful or not.
•
Connection States - Provide extra information about every change in a
connection opened by the firewall. Use this option to track connection handling by
the firewall and Application Level Gateways (ALGs).
Log Buffer
•
Prevent Log Overrun - Select this check box in order to stop logging firewall
activities when the memory allocated for the log fills up.
3. Click 'OK' to save the settings.
Following are the available event types that can be recorded in the firewall log:
Firewall internal - an accompanying explanation from the firewall internal mechanism will
be added in case this event-type is recorded.
Firewall status changed - the firewall changed status from up to down or the other way
around, as specified in the event type description.
STP packet - an STP packet has been accepted/rejected.
Illegal packet options - the options field in the packet's header is either illegal or forbidden.
Fragmented packet - a fragment has been rejected.
WinNuke protection - a WinNuke attack has been blocked.
ICMP replay - an ICMP replay message has been blocked.
ICMP redirect protection - an ICMP redirected message has been blocked.
Packet invalid in connection - a packet has been blocked, being on an invalid connection.
ICMP protection - a broadcast ICMP message has been blocked.
Broadcast/Multicast protection - a packet with a broadcast/multicast source IP has been
blocked.
Spoofing protection - a packet from the WAN with a source IP of the LAN has been
blocked.
DMZ network packet - a packet from a demilitarized zone network has been blocked.
Trusted device - a packet from a trusted device has been accepted.
Default policy - a packet has been accepted/blocked according to the default policy.
Remote administration - a packet designated for OpenRG management has been
accepted/blocked.
Access control - a packet has been accepted/blocked according to an access control rule.
Parental control - a packet has been blocked according to a parental control rule.
MP-202 Telephone Adapter 166
MP-202
LTRT-50604