ZyXEL Communications ZyWALL 5 User Manual page 507

FUNCTION
config edit firewall attack
minute-low <0-255>
config edit firewall attack
max-incomplete-high <0-255>
config edit firewall attack
max-incomplete-low <0-255>
config edit firewall attack
tcp-max-incomplete <0-255>
S S e e t t s s config edit firewall set <set
#> name <desired name>
Config edit firewall set <set
#> default-permit <forward |
block>
Config edit firewall set <set
#> icmp-timeout <seconds>
Config edit firewall set <set
#> udp-idle-timeout <seconds>
Config edit firewall set <set
#> connection-timeout
<seconds>
Config edit firewall set <set
#> fin-wait-timeout <seconds>
Config edit firewall set <set
#> tcp-idle-timeout <seconds>
Firewall Commands
Chart L-1 Firewall Commands
COMMAND
ZyWALL 5 Internet Security Appliance
DESCRIPTION
This command sets the threshold of half-open
sessions where the ZyWALL stops deleting half-
opened sessions.
This command sets the threshold of half-open
sessions where the ZyWALL starts deleting old
half-opened sessions until it gets them down to the
max incomplete low.
This command sets the threshold where the
ZyWALL stops deleting half-opened sessions.
This command sets the threshold of half-open TCP
sessions with the same destination where the
ZyWALL starts dropping half-open sessions to that
destination.
This command sets a name to identify a specified
set.
This command sets whether a packet is dropped or
allowed through, when it does not meet a rule
within the set.
This command sets the time period to allow an
ICMP session to wait for the ICMP response.
This command sets how long a UDP connection is
allowed to remain inactive before the ZyWALL
considers the connection closed.
This command sets how long ZyWALL waits for a
TCP session to be established before dropping the
session.
This command sets how long the ZyWALL leaves a
TCP session open after the firewall detects a FIN-
exchange (indicating the end of the TCP session).
This command sets how long ZyWALL lets an
inactive TCP connection remain open before
considering it closed.
L-3