ZyWALL 2 Series User’s Guide

Chart L-1Firewall Commands

FUNCTION

COMMAND

DESCRIPTION

Config edit firewall set <set #> rule <rule #> protocol <integer protocol value >

Config edit firewall set <set #> rule <rule #> log <none match not-match both>

Config edit firewall set <set #> rule <rule #> alert <yes no>

config edit firewall set <set #> rule <rule #> srcaddr-single <ip address>

config edit firewall set <set #> rule <rule #> srcaddr-subnet <ip address> <subnet mask>

config edit firewall set <set #> rule <rule #> srcaddr-range <start ip address> <end ip address>

config edit firewall set <set #> rule <rule #> destaddr-single <ip address>

config edit firewall set <set #> rule <rule #> destaddr-subnet <ip address> <subnet mask>

config edit firewall set <set #> rule <rule #> destaddr-range <start ip address> <end ip address>

This command sets the protocol specification number made in this rule for ICMP.

This command sets the ZyWALL to log traffic that matches the rule, doesn't match, both or neither.

This command sets whether or not the ZyWALL sends an alert e-mail when a DOS attack or a violation of a particular rule occurs.

This command sets the rule to have the ZyWALL check for traffic with this individual source address.

This command sets a rule to have the ZyWALL check for traffic from a particular subnet (defined by IP address and subnet mask).

This command sets a rule to have the ZyWALL check for traffic from this range of addresses.

This command sets the rule to have the ZyWALL check for traffic with this individual destination address.

This command sets a rule to have the ZyWALL check for traffic with a particular subnet destination (defined by IP address and subnet mask).

This command sets a rule to have the ZyWALL check for traffic going to this range of addresses.

Firewall Commands

L-5