beautypg.com

9 predefined services, 1 threshold values, 9 predefined services 14.10 firewall threshold – ZyXEL Communications 802.11g Wireless ADSL2+ 4-port VoIP IAD P-2602HWNLI User Manual

Page 227: Figure 121 firewall example: rules: myservice, 10 firewall threshold

background image

P-2602HWNLI User’s Guide

Chapter 14 Firewall Configuration

227

Figure 121 Firewall Example: Rules: MyService

14.9 Predefined Services

The Available Services list box in the Edit Rule screen (see

Section 14.7.1 on page 219

)

displays all predefined services that the ZyXEL Device already supports. Next to the name of
the service, two fields appear in brackets. The first field indicates the IP protocol type (TCP,
UDP, or ICMP). The second field indicates the IP port number that defines the service. (Note
that there may be more than one IP protocol type. For example, look at the default
configuration labeled “(DNS)”.

(UDP/TCP:53)

means UDP port 53 and TCP port 53. Custom

service ports may also be configured using the Edit Customized Services function discussed
previously. See

Appendix G on page 407

for a list of commonly used services and port

numbers.

14.10 Firewall Threshold

For DoS attacks, the ZyXEL Device uses thresholds to determine when to drop sessions that
do not become fully established. These thresholds apply globally to all sessions.

You can use the default threshold values, or you can change them to values more suitable to
your security requirements.

Refer to

Section 14.10.3 on page 229

to configure thresholds.

14.10.1 Threshold Values

Tune these parameters when something is not working and after you have checked the firewall
counters. These default values should work fine for most small offices. Factors influencing
choices for threshold values are: