ZyXEL Communications 802.11g HomePlug AV ADSL2+ Gateway P-660HWP-Dx User Manual page 372

Appendix G Firewall Commands
Table 168 Firewall Commands (continued)
FUNCTION
Rules
38
COMMAND
Config edit firewall set <set
#> tcp-idle-timeout <seconds>
Config edit firewall set <set
#> log <yes | no>
Config edit firewall set <set
#> rule <rule #> permit
<forward | block>
Config edit firewall set <set
#> rule <rule #> active <yes |
no>
Config edit firewall set <set
#> rule <rule #> protocol
<integer protocol value >
Config edit firewall set <set
#> rule <rule #> log <none |
match | not-match | both>
Config edit firewall set <set
#> rule <rule #> alert <yes |
no>
config edit firewall set <set
#> rule <rule #> srcaddr-
single <ip address>
config edit firewall set <set
#> rule <rule #> srcaddr-
subnet <ip address> <subnet
mask>
config edit firewall set <set
#> rule <rule #> srcaddr-range
<start ip address> <end ip
address>
DESCRIPTION
This command sets how long P-660HWP-Dx
lets an inactive TCP connection remain open
before considering it closed.
This command sets whether or not the P-
660HWP-Dx creates logs for packets that
match the firewall's default rule set.
This command sets whether packets that
match this rule are dropped or allowed
through.
This command sets whether a rule is enabled
or not.
This command sets the protocol specification
number made in this rule for ICMP.
This command sets the P-660HWP-Dx to log
traffic that matches the rule, doesn't match,
both or neither.
This command sets whether or not the P-
660HWP-Dx sends an alert e-mail when a
DOS attack or a violation of a particular rule
occurs.
This command sets the rule to have the P-
660HWP-Dx check for traffic with this
individual source address.
This command sets a rule to have the P-
660HWP-Dx check for traffic from a particular
subnet (defined by IP address and subnet
mask).
This command sets a rule to have the P-
660HWP-Dx check for traffic from this range
of addresses.
P-660HWP-Dx User's Guide