ZyWALL 10/50 Internet Security Gateway

Subject:

Firewall Alert From ZyWALL

Date:

Fri, 07 Apr 2000 10:05:42

The date format here

 

From:

is Day-Month-Year.

 

user@zyxel.com

 

 

 

 

To:

 

 

 

 

user@zyxel.com

 

 

 

 

 

 

 

 

 

1Apr

7 00

From:192.168.1.1

To:192.168.1.255

default policy

forward

 

 

src port:00520 dest port:00520

<1,00>

09:54:03 UDP

2Apr

7 00

From:192.168.1.131

To:192.168.1.255

default policy

forward

 

 

src port:00520 dest port:00520

<1,00>

09:54:17 UDP

3Apr

7 00

From:192.168.1.6

To:10.10.10.10 match

forward

09:54:19 UDP

src port:03516 dest port:00053

<1,01>

……………………………..{snip}…………………………………..

 

 

 

……………………………..{snip}…………………………………..

To:192.168.1.255

match

 

126Apr

7 00

From:192.168.1.1

 

forward

 

 

src port:00520 dest port:00520

<1,02>

10:05:00 UDP

127Apr

7 00

From:192.168.1.131

To:192.168.1.255

match

 

forward

 

 

src port:00520 dest port:00520

<1,02>

10:05:17 UDP

128Apr

7 00

From:192.168.1.1

To:192.168.1.255

match

 

forward

 

 

src port:00520 dest port:00520

<1,02>

10:05:30 UDP

End of Firewall Log

 

 

 

 

You may edit the subject title

The date format here is Month-Day-Year. The time format is Hour-Minute-Second.

"End of Log" message shows that a complete log has been sent.

Figure 12-3 E-mail Log

12.4 Attack Alert

Attack alerts are the first defense against DOS attacks. In the Attack Alert screen, shown later, you may choose to generate an alert whenever an attack is detected. For DoS attacks, the ZyWALL uses thresholds to determine when to drop sessions that do not become fully established. These thresholds apply globally to all sessions.

You can use the default threshold values, or you can change them to values more suitable to your security requirements.

12.4.1 Threshold Values

Tune these parameters when something is not working and after you have checked the firewall counters. These default values should work fine for normal small offices with ADSL bandwidth. Factors influencing choices for threshold values are:

1.The maximum number of opened sessions.

12-6

Using the ZyWALL Web Configurator