ZyWALL 10~100 Series Internet Security Gateway

Chart 10-1 Firewall Commands

FUNCTION

COMMAND

DESCRIPTION

config edit firewall e-mailThis command sets the hour when the firewall

hour <0-23>log is sent through e- mail if the ZyWALL is set to send it on an hourly, daily or weekly basis.

config edit firewall e-mail

This command sets the minute of the hour for

minute <0-59>

the firewall log to be sent via e- mail if the

 

ZyWALL is set to send it on a hourly, daily or

 

weekly basis.

Attack config edit firewall attack

This command enables or disables the

send-alert <yes no>

immediate sending of DOS attack notification

 

e-mail messages.

config edit firewall attack

Set this command to yes to block new traffic

block <yes no>

after the tcp-max-incomplete threshold is

 

exceeded. Set it to no to delete the oldest

 

half-open session when traffic exceeds the

 

tcp-max-incomplete threshold.

config edit firewall attack

This command sets the number of minutes for

block-minute <0-255>

new sessions to be blocked when the tcp-

 

max-incomplete threshold is reached. This

 

command is only valid when block is set to

 

yes.

config edit firewall attack

This command sets the threshold rate of new

minute-high <0-255>

half-open sessions per minute where the

 

ZyWALL starts deleting old half-opened

 

sessions until it gets them down to the minute-

 

low threshold.

Firewall Commands

10-3