ZyWALL 10~100 Series Internet Security Gateway

Chart 10-1 Firewall Commands

FUNCTION

 

 

COMMAND

 

Config edit

firewall set <set

 

#>

connection-timeout <seconds>

 

Config edit

firewall set <set

 

#>

fin-wait-timeout <seconds>

Config edit firewall set <set #> tcp-idle-timeout <seconds>

Config edit firewall set <set #> log <yes no>

Rules Config edit firewall set <set #> rule <rule #> permit <forward block>

Config edit firewall set <set #> rule <rule #> active <yes no>

Config edit firewall set <set #> rule <rule #> protocol <integer protocol value >

Config edit firewall set <set #> rule <rule #> log <none match not-match both>

DESCRIPTION

This command sets how long ZyWALL waits for a TCP session to be established before dropping the session.

This command sets how long the ZyWALL leaves a TCP session open after the firewall detects a FIN-exchange (indicating the end of the TCP session).

This command sets how long ZyWALL lets an inactive TCP connection remain open before considering it closed.

This command sets whether or not the ZyWALL creates logs for packets that match the firewall’s default rule set.

This command sets whether packets that match this rule are dropped or allowed through.

This command sets whether a rule is enabled or not.

This command sets the protocol specification number made in this rule for ICMP.

This command sets the ZyWALL to log traffic that matches the rule, doesn't match, both or neither.

Firewall Commands

10-5