beautypg.com

Table 44 attack logs – ZyXEL Communications ZyXEL ZyWALL 5 User Manual

Page 645

background image

ZyWALL 5 User’s Guide

644

Appendix Q Log Descriptions

For type and code details, see

Table 53 on page 653

.

%s: Forbidden Web site The web site is in the forbidden web site list.

%s: Contains ActiveX

The web site contains ActiveX.

%s: Contains Java
applet

The web site contains a Java applet.

%s: Contains cookie

The web site contains a cookie.

%s: Proxy mode
detected

The router detected proxy mode in the packet.

%s

The content filter server responded that the web site is in the blocked

category list, but it did not return the category type.

%s: %s

The content filter server responded that the web site is in the blocked

category list, and returned the category type.

%s(cache hit)

The system detected that the web site is in the blocked list from the

local cache, but does not know the category type.

%s :%s(cache hit)

The system detected that the web site is in blocked list from the local

cache, and knows the category type.

%s: Trusted Web site

The web site is in a trusted domain.

%s

When the content filter is not on according to the time schedule or you

didn't select the "Block Matched Web Site” checkbox, the system

forwards the web content.

Waiting content filter
server timeout

The external content filtering server did not respond within the timeout

period.

DNS resolving failed

The ZyWALL cannot get the IP address of the external content filtering

via DNS query.

Creating socket failed The ZyWALL cannot issue a query because TCP/IP socket creation

failed, port:port number.

Connecting to content
filter server fail

The connection to the external content filtering server failed.

License key is invalid The external content filtering license key is invalid.

Table 44 Attack Logs

LOG MESSAGE

DESCRIPTION

attack [ TCP | UDP | IGMP
| ESP | GRE | OSPF ]

The firewall detected a TCP/UDP/IGMP/ESP/GRE/OSPF attack.

attack ICMP (type:%d,
code:%d)

The firewall detected an ICMP attack.

land [ TCP | UDP | IGMP |
ESP | GRE | OSPF ]

The firewall detected a TCP/UDP/IGMP/ESP/GRE/OSPF land

attack.

land ICMP (type:%d,
code:%d)

The firewall detected an ICMP land attack.

ip spoofing - WAN [ TCP |
UDP | IGMP | ESP | GRE |
OSPF ]

The firewall detected an IP spoofing attack on the WAN port.

Table 43 Content Filtering Logs (continued)

LOG MESSAGE

DESCRIPTION