ZyXEL Communications Prestige 662HW Series, Руководство пользователя

Страница: 449 / 458

Prestige 662HW Series User’s Guide
Log Descriptions H-3
(Protocol) is the protocol of the packet (for example TCP or UDP) that triggered the log.
(Direction) is the direction in which the packet was traveling (for example LAN to WAN or
WAN to LAN)
(Rule) is the number of the firewall rule that caused the log.
Chart H-5 Access Logs
LOG MESSAGE DESCRIPTION
Firewall default
policy (Protocol,
Direction)
Access matched the default policy and the Prestige blocked or
forwarded it according to the configuration of the default firewall
policy.
Firewall rule match
(Protocol, Direction,
Rule)
Access matched a firewall rule and the Prestige blocked or forwarded
it according to the rule’s configuration.
Firewall rule NOT
match: (Protocol,
Direction, Rule)
Access did not match a firewall rule and the Prestige logged it.
dest port (Protocol,
Direction)
Access did not match a firewall rule’s destination port and the
Prestige logged it.
src port (Protocol,
Direction)
Access did not match a firewall rule’s source port and the Prestige
logged it.
dest IP (Protocol,
Direction)
Access did not match a firewall rule’s destination IP address and the
Prestige logged it.
src IP (Protocol,
Direction)
Access did not match a firewall rule’s source IP address and the
Prestige logged it.
protocol (Protocol,
Direction)
Access did not match a firewall rule’s protocol and the Prestige
logged it.
Triangle route packet
forwarded (Protocol)
The firewall allowed a triangle route session to pass through.
ICMP Source Quench The Prestige sent or received an ICMP source quench packet to tell a
host to slow down data transmission.
ICMP Time Exceed The Prestige sent or received an ICMP Time Exceed packet because
a packet with zero Time To Live (TTL) was dropped.
ICMP Destination
Unreachable
The Prestige sent or received an ICMP Destination Unreachable
packet when a packet was dropped because the target port was not
open.
Packet without a NAT
table entry blocked
(Protocol)
The router blocked a packet that did not have a corresponding NAT
table entry.
Out of order TCP
handshake packet
blocked (Protocol)
The router blocked a TCP handshake packet that came out of the
proper order
Unsupported/out-of-
order ICMP (Protocol)
The Prestige generates this log after it drops an ICMP packet due to
one of the following two reasons:
1. The Prestige does not support the ICMP packet's protocol.
2. The ICMP packet is an echo reply for which there was no
corresponding echo request.