ZyWALL 10~100 Series Internet Security Gateway

Chart 10-1 Firewall Commands

FUNCTION

COMMAND

DESCRIPTION

Config edit firewall set <set #> rule <rule #> alert <yes no>

config edit firewall set <set #> rule <rule #> srcaddr-single <ip address>

config edit firewall set <set #> rule <rule #> srcaddr-subnet <ip address> <subnet mask>

config edit firewall set <set #> rule <rule #> srcaddr-range <start ip address> <end ip address>

config edit firewall set <set #> rule <rule #> destaddr- single <ip address>

config edit firewall set <set #> rule <rule #> destaddr- subnet <ip address> <subnet mask>

config edit firewall set <set #> rule <rule #> destaddr-range <start ip address> <end ip address>

This command sets whether or not the ZyWALL sends an alert e-mail when a DOS attack or a violation of a particular rule occurs.

This command sets the rule to have the ZyWALL check for traffic with this individual source address.

This command sets a rule to have the ZyWALL check for traffic from a particular subnet (defined by IP address and subnet mask).

This command sets a rule to have the ZyWALL check for traffic from this range of addresses.

This command sets the rule to have the ZyWALL check for traffic with this individual destination address.

This command sets a rule to have the ZyWALL check for traffic with a particular subnet destination (defined by IP address and subnet mask).

This command sets a rule to have the ZyWALL check for traffic going to this range of addresses.

10-6

Firewall Commands