ZyXEL Communications ZyWALL5UTM 4.0 User Manual

ZyWALL 5/35/70 Series User’s Guide

Appendix N Firewall Commands

754

config edit firewall attack 
minute-high <0-255>

This command sets the threshold rate of new 

half-open sessions per minute where the 

ZyWALL starts deleting old half-opened 

sessions until it gets them down to the minute-

low threshold.

config edit firewall attack 
minute-low <0-255>

This command sets the threshold of half-open 

sessions where the ZyWALL stops deleting 

half-opened sessions.

config edit firewall attack 
max-incomplete-high <0-255>

This command sets the threshold of half-open 

sessions where the ZyWALL starts deleting 

old half-opened sessions until it gets them 

down to the max incomplete low.

config edit firewall attack 
max-incomplete-low <0-255>

This command sets the threshold where the 

ZyWALL stops deleting half-opened sessions.

config edit firewall attack 
tcp-max-incomplete <0-255>

This command sets the threshold of half-open 

TCP sessions with the same destination 

where the ZyWALL starts dropping half-open 

sessions to that destination.

Sets

config edit firewall set <set 
#> name <desired name>

This command sets a name to identify a 

specified set.

Config edit firewall set <set 
#> default-permit <forward | 
block>

This command sets whether a packet is 

dropped or allowed through, when it does not 

meet a rule within the set.

Config edit firewall set <set 
#> icmp-timeout <seconds>

This command sets the time period to allow an 

ICMP session to wait for the ICMP response.

Config edit firewall set <set 
#> udp-idle-timeout <seconds>

This command sets how long a UDP 

connection is allowed to remain inactive 

before the ZyWALL considers the connection 

closed.

Config edit firewall set <set 
#> connection-timeout 
<seconds>

This command sets how long ZyWALL waits 

for a TCP session to be established before 

dropping the session.

Config edit firewall set <set 
#> fin-wait-timeout <seconds> 

This command sets how long the ZyWALL 

leaves a TCP session open after the firewall 

detects a FIN-exchange (indicating the end of 

the TCP session).

Table 271   Firewall Commands (continued)