Firewall Technical Reference; Firewall Rules Overview - ZyXEL Communications P-660H-61 User Manual

Chapter 10 Firewall
The following table describes the labels in this screen.
Table 57 Security > Firewall > DoS > Advanced
LABEL
TCP SYN-Request
Count
UDP Packet Count
ICMP Echo-Request
Count
Back
Apply
Cancel

10.7 Firewall Technical Reference

This section provides some technical background information about the topics covered in this
chapter.

10.7.1 Firewall Rules Overview

Your customized rules take precedence and override the ZyXEL Device's default settings. The ZyXEL
Device checks the source IP address, destination IP address and IP protocol type of network traffic
against the firewall rules (in the order you list them). When the traffic matches a rule, the ZyXEL
Device takes the action specified in the rule.
Firewall rules are grouped based on the direction of travel of packets to which they apply:
• LAN to Router
• LAN to WAN
Note: The LAN includes both the LAN port and the WLAN.
By default, the ZyXEL Device's stateful packet inspection allows packets traveling in the following
directions:
• LAN to Router
These rules specify which computers on the LAN can manage the ZyXEL Device (remote
management).
Note: You can also configure the remote management settings to allow only a specific
computer to manage the ZyXEL Device.
176
DESCRIPTION
This is the rate of new TCP half-open sessions per second that causes the firewall to
start deleting half-open sessions. When the rate of new connection attempts rises
above this number, the ZyXEL Device deletes half-open sessions as required to
accommodate new connection attempts.
This is the rate of new UDP half-open sessions per second that causes the firewall to
start deleting half-open sessions. When the rate of new connection attempts rises
above this number, the ZyXEL Device deletes half-open sessions as required to
accommodate new connection attempts.
This is the rate of new ICMP Echo-Request half-open sessions per second that causes
the firewall to start deleting half-open sessions. When the rate of new connection
attempts rises above this number, the ZyXEL Device deletes half-open sessions as
required to accommodate new connection attempts.
Click this button to return to the previous screen.
Click this to save your changes.
Click this to restore your previously saved settings.
• WAN to LAN
• WAN to Router
ADSL Router Series User's Guide