Zyxel-communications G.SHDSL.bis 4-port Security Gateway P-793H Manuel d'utilisateur télécharger pdf (Page 405)

P-793H User’s Guide

Appendix H Firewall Commands 405

config edit firewall attack

minute-low <0-255>

This command sets the threshold of half-open

sessions where the ZyXEL Device stops

deleting half-opened sessions.

config edit firewall attack

max-incomplete-high <0-255>

This command sets the threshold of half-open

sessions where the ZyXEL Device starts

deleting old half-opened sessions until it gets

them down to the max incomplete low.

config edit firewall attack

max-incomplete-low <0-255>

This command sets the threshold where the

ZyXEL Device stops deleting half-opened

sessions.

config edit firewall attack

tcp-max-incomplete <0-255>

This command sets the threshold of half-open

TCP sessions with the same destination

where the ZyXEL Device starts dropping half-

open sessions to that destination.

Sets config edit firewall set <set

#> name <desired name>

This command sets a name to identify a

specified set.

Config edit firewall set <set

#> default-permit <forward |

block>

This command sets whether a packet is

dropped or allowed through, when it does not

meet a rule within the set.

Config edit firewall set <set

#> icmp-timeout <seconds>

This command sets the time period to allow an

ICMP session to wait for the ICMP response.

Config edit firewall set <set

#> udp-idle-timeout <seconds>

This command sets how long a UDP

connection is allowed to remain inactive

before the ZyXEL Device considers the

connection closed.

Config edit firewall set <set

#> connection-timeout

<seconds>

This command sets how long ZyXEL Device

waits for a TCP session to be established

before dropping the session.

Config edit firewall set <set

#> fin-wait-timeout <seconds>

This command sets how long the ZyXEL

Device leaves a TCP session open after the

firewall detects a FIN-exchange (indicating the

end of the TCP session).

Config edit firewall set <set

#> tcp-idle-timeout <seconds>

This command sets how long ZyXEL Device

lets an inactive TCP connection remain open

before considering it closed.

Table 154 Firewall Commands (continued)

FUNCTION COMMAND DESCRIPTION

1 2 ... 400 401 402 403 404 405 406 407 408 409 410 ... 431 432

Commentaires sur ces manuels

Pas de commentaire