ZyWALL 10/50 Internet Security Gateway

FUNCTION

COMMAND

DESCRIPTION

Config edit firewall set <set #> rule <rule #> log <none match not-match both>

Config edit firewall set <set #> rule <rule #> alert <yes no>

config edit firewall set <set #> rule <rule #> srcaddr-single <ip address>

config edit firewall set <set #> rule <rule #> srcaddr-subnet <ip address> <subnet mask>

config edit firewall set <set #> rule <rule #> srcaddr-range <start ip address> <end ip address>

config edit firewall set <set #> rule <rule #> destaddr-single <ip address>

config edit firewall set <set #> rule <rule #> destaddr-subnet <ip address> <subnet mask>

config edit firewall set <set #> rule <rule #> destaddr-range <start ip address> <end ip address>

config edit firewall set <set #> rule <rule #> TCP destport-single <port #>

This command sets the ZyWALL to log traffic that matches the rule, doesn't match, both or neither.

This command sets whether or not the ZyWALL sends an alert e-mail when a DOS attack or a violation of a particular rule occurs.

This command sets the rule to have the ZyWALL check for traffic with this individual source address.

This command sets a rule to have the ZyWALL check for traffic from a particular subnet (defined by IP address and subnet mask).

This command sets a rule to have the ZyWALL check for traffic from this range of addresses.

This command sets the rule to have the ZyWALL check for traffic with this individual destination address.

This command sets a rule to have the ZyWALL check for traffic with a particular subnet destination (defined by IP address and subnet mask).

This command sets a rule to have the ZyWALL check for traffic going to this range of addresses.

This command sets a rule to have the ZyWALL check for TCP traffic with this destination address. You may repeat this command to enter various, non-consecutive port numbers.

Firewall Commands

U