beautypg.com

ZyXEL Communications Internet Security Gateway 10~100 Series User Manual

Page 61

background image

ZyWALL 10~100 Series Internet Security Gateway

Firewall Commands

10-3

Chart 10-1 Firewall Commands

FUNCTION

COMMAND

DESCRIPTION

config edit firewall e-mail
hour <0-23>

This command sets the hour when the firewall
log is sent through e- mail if the ZyWALL is
set to send it on an hourly, daily or weekly
basis.

config edit firewall e-mail

minute <0-59>

This command sets the minute of the hour for
the firewall log to be sent via e- mail if the
ZyWALL is set to send it on a hourly, daily or
weekly basis.

A

A

t

t

t

t

a

a

c

c

k

k

config edit firewall attack
send-alert

This command enables or disables the
immediate sending of DOS attack notification
e-mail messages.

config edit firewall attack
block

Set this command to yes to block new traffic
after the tcp-max-incomplete threshold is
exceeded. Set it to no to delete the oldest
half-open session when traffic exceeds the
tcp-max-incomplete threshold.

config edit firewall attack
block-minute <0-255>

This command sets the number of minutes for
new sessions to be blocked when the tcp-
max-incomplete threshold is reached. This
command is only valid when block is set to
yes.

config edit firewall attack
minute-high <0-255>

This command sets the threshold rate of new
half-open sessions per minute where the
ZyWALL starts deleting old half-opened
sessions until it gets them down to the minute-
low threshold.