ZyXEL Communications P-2302HWL-P1, Руководство по выпуску прошивки

Страница: 22 / 36

ZyXEL Confidential
360AJB0C1.rtf 22/36
<seconds> is terminated
pnc <yes|no> PNC is allowed when 'yes' is set even there is a
rule to block PNC
log <yes|no> Switch on/off sending the log for matching the
default permit
rule <rule#> permit <forward|block> Edit whether a packet is dropped or allowed
when it matches this rule
active <yes|no> Edit whether a rule is enabled or not
protocol <0~255> Edit the protocol number for a rule. 1=ICMP,
6=TCP, 17=UDP...
log
<none|match|not-match|both
> Sending a log for a rule when the packet
none|matches|not match|both the rule
alert <yes|no> Activate or deactivate the notification when a
DoS attack occurs or there is a violation of any
alert settings. In case of such instances, the
function will send an email to the SMTP
destination address and log an alert.
srcaddr-single <ip address> Select and edit a source address of a packet which
complies to this rule
srcaddr-subnet <ip address>
<subnet mask> Select and edit a source address and subnet mask
if a packet which complies to this rule.
srcaddr-range <start ip
address> <end ip address> Select and edit a source address range of a packet
which complies to this rule.
destaddr-single <ip address> Select and edit a destination address of a packet
which complies to this rule
destaddr-subnet <ip
address> <subnet mask> Select and edit a destination address and subnet
mask if a packet which complies to this rule.
destaddr-range <start ip
address> <end ip address> Select and edit a destination address range of a
packet which complies to this rule.
tcp destport-single <port#> Select and edit the destination port of a packet
which comply to this rule. For non-consecutive
port numbers, the user may repeat this command
line to enter the multiple port numbers.
tcp destport-range <start
port#> <end port#> Select and edit a destination port range of a
packet which comply to this rule.
udp destport-single <port#> Select and edit the destination port of a packet
which comply to this rule. For non-consecutive
port numbers, users may repeat this command
line to enter the multiple port numbers.