ZyXEL Communications Internet Security Gateway ZyWALL 100, User Manual

Page: 661 / 708

ZyWALL Series Internet Security Gateway
Log Descriptions S-5
Chart S-5 Packet Filter Logs
LOG MESSAGE DESCRIPTION
[ TCP | UDP | ICMP | IGMP |
Generic ] packet filter matched
(set: %d, rule: %d)
Attempted access matched a configured filter rule
(denoted by its set and rule number) and was blocked or
forwarded according to the rule.
Chart S-6 ICMP Logs
LOG MESSAGE DESCRIPTION
Firewall default policy:
ICMP <Packet Direction>,
<type:%d>, <code:%d>
ICMP access matched the default policy and was blocked or
forwarded according to the user's setting. See the section on
ICMP messages for type and code details.
Firewall rule [NOT] match:
ICMP <Packet Direction>,
<rule:%d>, <type:%d>,
<code:%d>
ICMP access matched (or didn’t match) a firewall rule (denoted by
its number) and was blocked or forwarded according to the rule.
See the section on ICMP messages for type and code details.
Triangle route packet
forwarded: ICMP
The firewall allowed a triangle route session to pass through.
Packet without a NAT table
entry blocked: ICMP
The router blocked a packet that didn’t have a corresponding NAT
table entry.
Unsupported/out-of-order
ICMP: ICMP
The firewall does not support this kind of ICMP packets or the
ICMP packets are out of order.
Router reply ICMP packet:
ICMP
The router sent an ICMP reply packet to the sender.