Dos Rule Modify; Dos Rule Move - Zte ZXR10 8900 Series Command Manual

Command
Function
Command Format
Parameter
Description
Command
Function
Command Format
Parameter
Description
Command
Illustration

dos rule modify

This command is used to modify intrusion detection rule.
dos rule modify ruleid <string> stattype <synflood|udpflo
od|icmpflood|portscan|ipsweep> threshold <number>[log
<yes|no>][action <pass|block>]
Parameter
modify
ruleid
<string>
stattype
synflood|udpflood|ic
mpflood|portscan|i
psweep
threshold
<number>
log
yes|no
action
pass|block

dos rule move

This command is used to move intrusion detection rule.
dos rule move id <number1> before <number2>
Parameter
<number1>
<number2>
In intrusion detection, match rules according to rule ids. User can
move rules according to demands.
Confidential and Proprietary Information of ZTE CORPORATION
Description
This modifies intrusion detection rule.
This sets ID of the rule to be modified.
command dos rule show can be used to
view id of each rule.
This is an ID string.
This sets statistics type of rule to be modified.
This is the statistics type. User can give
choice according to demands.
This sets threshold of statistics type.
This is one number, which is the threshold.
This sets whether to record log.
yes: Record the event into log; no: Don't
record the event into log.
It sets whether to permit packets to pass
through.
pass: It indicates permitting packets to pass
through; block: It indicates denying packets
passing through.
Description
This is one number, indicating ID of the rule
to be modified.
This is one number, indicating ID of the rule
to be referred to.
Chapter 7 dos
77