ZyXEL Communications Internet Security Gateway ZyWALL 100, User Manual

Page: 639 / 708

ZyWALL Series Internet Security Gateway
Firewall Commands O-3
Chart O-1 Firewall Commands
FUNCTION COMMAND DESCRIPTION
config edit firewall e-mail
hour <0-23> This command sets the hour when the firewall
log is sent through e- mail if the ZyWALL is
set to send it on an hourly, daily or weekly
basis.
config edit firewall e-mail
minute <0-59>
This command sets the minute of the hour for
the firewall log to be sent via e- mail if the
ZyWALL is set to send it on a hourly, daily or
weekly basis.
A
A
t
t
t
t
a
a
c
c
k
k
config edit firewall attack
send-alert <yes | no> This command enables or disables the
immediate sending of DOS attack notification
e-mail messages.
config edit firewall attack
block <yes | no>
Set this command to
yes
to block new traffic
after the tcp-max-incomplete threshold is
exceeded. Set it to
no
to delete the oldest
half-open session when traffic exceeds the
tcp-max-incomplete threshold.
config edit firewall attack
block-minute <0-255> This command sets the number of minutes for
new sessions to be blocked when the tcp-
max-incomplete threshold is reached. This
command is only valid when
block
is set to
yes
.
config edit firewall attack
minute-high <0-255> This command sets the threshold rate of new
half-open sessions per minute where the
ZyWALL starts deleting old half-opened
sessions until it gets them down to the minute-
low threshold.