ZyXEL Communications ZyXEL ZyWALL 50 User Manual page 312

FUNCTION
config edit firewall attack tcp-
max-incomplete <0-255>
S e t s
S e t s
config edit firewall set <set #>
name <desired name>
Config edit firewall set <set #>
default-permit <forward | block>
Config edit firewall set <set #>
icmp-timeout <seconds>
Config edit firewall set <set #>
udp-idle-timeout <seconds>
Config edit firewall set <set #>
connection-timeout <seconds>
Config edit firewall set <set #>
fin-wait-timeout <seconds>
Config edit firewall set <set #>
tcp-idle-timeout <seconds>
Config edit firewall set <set #>
log <yes | no>
R u l e s
R u l e s
Config edit firewall set <set #>
rule
<rule #> permit <forward | block>
Config edit firewall set <set #>
rule
<rule #> active <yes | no>
Config edit firewall set <set #>
rule
<rule #> protocol <integer
protocol value >
Config edit firewall set <set #>
rule
<rule #> log <none | match | not-
match | both>
Config edit firewall set <set #>
Firewall CLI Commands
CLI SYNTAX
ZyWALL 50 Internet Security Gateway
DESCRIPTION
The threshold to start executing the block field.
Edits the name for a specified set.
Edits whether a packet is dropped or allowed through, when
it does not meet a rule within the set.
Edits the time limit, in seconds, for an idle ICMP session,
before it is terminated.
Edits the time limit, in seconds, for an idle UDP session,
before it is terminated.
Edits the wait time, in seconds, for the SYN traffic in
initiating a TCP session, before it is terminated.
Edits the wait time, in seconds, for the FIN traffic in
concluding a TCP session, before it is terminated.
Edits the time limit, in seconds, for an idle TCP session,
before it is terminated.
Switches on/off the logs for matching default permit.
Edits whether a packet is dropped or allowed through, when
it meets this rule.
Edits whether a rule is enabled or not.
Edits the protocol specification number made in this rule for
ICMP currently.
Edits whether traffic that does match the rule, doesn't match,
both or neither is logged.
Activates or deactivates the notification function, for when a
O