ZyXEL Communications ZYWALL10 User Manual
Page 247
ZyWALL 10 Internet Security Gateway
CLI Commands
I
Function
CLI Syntax
Description
Config edit firewall set <set #>
default-permit <forward | block>
Edits whether a packet is dropped or allowed through, when
it does not meet a rule within the set.
Config edit firewall set <set #>
icmp-timeout <seconds>
Edits the time limit, in seconds, for an idle ICMP session,
before it is terminated.
Config edit firewall set <set #>
udp-idle-timeout <seconds>
Edits the time limit, in seconds, for an idle UDP session,
before it is terminated.
Config edit firewall set <set #>
connection-timeout <seconds>
Edits the wait time, in seconds, for the SYN traffic in initiating
a TCP session, before it is terminated.
Config edit firewall set <set #>
fin-wait-timeout <seconds>
Edits the wait time, in seconds, for the FIN traffic in
concluding a TCP session, before it is terminated.
Config edit firewall set <set #>
tcp-idle-timeout <seconds>
Edits the time limit, in seconds, for an idle TCP session,
before it is terminated.
Config edit firewall set <set #>
log <yes | no>
Switches on/off the logs for matching default permit.
R
R
u
u
l
l
e
e
s
s
Config edit firewall set <set #>
rule
<rule #> permit <forward | block>
Edits whether a packet is dropped or allowed through, when
it meets this rule.
Config edit firewall set <set #>
rule
<rule #> active <yes | no>
Edits whether a rule is enabled or not.
Config edit firewall set <set #>
rule
<rule #> protocol <integer
protocol value >
Edits the protocol specification number made in this rule for
ICMP currently.
Config edit firewall set <set #>
rule
<rule #> log <none | match | not-
match | both>
Edits whether traffic that does match the rule, doesn't match,
both or neither is logged.
Config edit firewall set <set #>
rule
<rule #> alert <yes | no>
Activates or deactivates the notification function, for when a
DOS attack occurs or there is a violation of any alert settings.
In case of such instances, the function will send an e-mail to
the SMTP destination address and log an alert.
config edit firewall set <set #>
rule
<rule #> srcaddr-single <ip
address>
Selects and edits a source address of the traffic which
comply to this rule.