ZyXEL Communications ZyXEL ZYWALL10 User Manual page 247

Function
Config edit firewall set <set #>
default-permit <forward | block>
Config edit firewall set <set #>
icmp-timeout <seconds>
Config edit firewall set <set #>
udp-idle-timeout <seconds>
Config edit firewall set <set #>
connection-timeout <seconds>
Config edit firewall set <set #>
fin-wait-timeout <seconds>
Config edit firewall set <set #>
tcp-idle-timeout <seconds>
Config edit firewall set <set #>
log <yes | no>
R u l e s
R u l e s
Config edit firewall set <set #>
rule
<rule #> permit <forward | block>
Config edit firewall set <set #>
rule
<rule #> active <yes | no>
Config edit firewall set <set #>
rule
<rule #> protocol <integer
protocol value >
Config edit firewall set <set #>
rule
<rule #> log <none | match | not-
match | both>
Config edit firewall set <set #>
rule
<rule #> alert <yes | no>
config edit firewall set <set #>
rule
<rule #> srcaddr-single <ip
address>
CLI Commands
CLI Syntax
ZyWALL 10 Internet Security Gateway
Description
Edits whether a packet is dropped or allowed through, when
it does not meet a rule within the set.
Edits the time limit, in seconds, for an idle ICMP session,
before it is terminated.
Edits the time limit, in seconds, for an idle UDP session,
before it is terminated.
Edits the wait time, in seconds, for the SYN traffic in initiating
a TCP session, before it is terminated.
Edits the wait time, in seconds, for the FIN traffic in
concluding a TCP session, before it is terminated.
Edits the time limit, in seconds, for an idle TCP session,
before it is terminated.
Switches on/off the logs for matching default permit.
Edits whether a packet is dropped or allowed through, when
it meets this rule.
Edits whether a rule is enabled or not.
Edits the protocol specification number made in this rule for
ICMP currently.
Edits whether traffic that does match the rule, doesn't match,
both or neither is logged.
Activates or deactivates the notification function, for when a
DOS attack occurs or there is a violation of any alert settings.
In case of such instances, the function will send an e-mail to
the SMTP destination address and log an alert.
Selects and edits a source address of the traffic which
comply to this rule.
I