ZyXEL Communications Internet Security Gateway ZyWALL 2 Series - Manual (Page 594)

ZyWALL 2 User’s Guide
O-8 Log Descriptions
Chart O-6 Access Logs
LOG MESSAGE DESCRIPTION
Filter match DROP <set
%d/rule %d>
Access matched the listed filter rule and the ZyWALL dropped the
packet to block access.
Filter match DROP <set
%d/rule %d>
Access matched the listed filter rule (denied LAN IP) and the ZyWALL
dropped the packet to block access.
Filter match FORWARD
<set %d/rule %d>
TCP access matched the listed filter rule. Access was allowed and the
router forwarded the packet.
Filter match FORWARD
<set %d/rule %d>
UDP access matched the listed filter rule. Access was allowed and
the router forwarded the packet.
Filter match FORWARD
<set %d/rule %d>
ICMP access matched the listed filter rule. Access was allowed and
the router forwarded the packet.
Filter match FORWARD
<set %d/rule %d>
Access matched the listed filter rule. Access was allowed and the
router forwarded the packet.
Filter match FORWARD
<set %d/rule %d>
Access matched the listed filter rule (denied LAN IP). Access was
allowed and the router forwarded the packet.
(set:%d) With firewall messages, this is the number of the ACL policy set and
denotes the packet's direction (see Chart O-7).
With filter messages, this is the number of the filter set.
(rule:%d) With firewall messages, the firewall rule number denotes the number
of a firewall rule within an ACL policy set.
With filter messages, this is the number of an individual filter rule.
Router sent blocked
web site message
A message was sent to notify a user that the router blocked access to
a requested web site
Triangle route packet
forwarded
The firewall allowed a triangle route session to pass through.
Firewall sent TCP
packet in response to
DoS attack
The firewall detected a DoS attack and sent a TCP packet(s) in
response.
Firewall sent TCP
reset packets
The firewall sent out TCP reset packets.