ZyXEL Communications P-661H Series - Manual (Page 331)

P-661H/HW Series User’s Guide
Appendix G 331
config edit firewall attack
minute-low <0-255> This command sets the threshold of half-open
sessions where the ZyXEL Device stops
deleting half-opened sessions.
config edit firewall attack
max-incomplete-high <0-255> This command sets the threshold of half-open
sessions where the ZyXEL Device starts
deleting old half-opened sessions until it gets
them down to the max incomplete low.
config edit firewall attack
max-incomplete-low <0-255> This command sets the threshold where the
ZyXEL Device stops deleting half-opened
sessions.
config edit firewall attack
tcp-max-incomplete <0-255> This command sets the threshold of half-open
TCP sessions with the same destination
where the ZyXEL Device starts dropping half-
open sessions to that destination.
Sets config edit firewall set #> name This command sets a name to identify a
specified set.
Config edit firewall set #> default-permit block> This command sets whether a packet is
dropped or allowed through, when it does not
meet a rule within the set.
Config edit firewall set #> icmp-timeout This command sets the time period to allow an
ICMP session to wait for the ICMP response.
Config edit firewall set #> udp-idle-timeout This command sets how long a UDP
connection is allowed to remain inactive
before the ZyXEL Device considers the
connection closed.
Config edit firewall set #> connection-timeout
This command sets how long ZyXEL Device
waits for a TCP session to be established
before dropping the session.
Config edit firewall set #> fin-wait-timeout This command sets how long the ZyXEL
Device leaves a TCP session open after the
firewall detects a FIN-exchange (indicating the
end of the TCP session).
Config edit firewall set #> tcp-idle-timeout This command sets how long ZyXEL Device
lets an inactive TCP connection remain open
before considering it closed.
Table 142 Firewall Commands (continued)
FUNCTION COMMAND DESCRIPTION