ZyXEL P-660HW-D1 User Guide - Page 176
Firewall Technical Reference
View all ZyXEL P-660HW-D1 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 176 highlights
Chapter 10 Firewall The following table describes the labels in this screen. Table 57 Security > Firewall > DoS > Advanced LABEL DESCRIPTION TCP SYN-Request Count This is the rate of new TCP half-open sessions per second that causes the firewall to start deleting half-open sessions. When the rate of new connection attempts rises above this number, the ZyXEL Device deletes half-open sessions as required to accommodate new connection attempts. UDP Packet Count This is the rate of new UDP half-open sessions per second that causes the firewall to start deleting half-open sessions. When the rate of new connection attempts rises above this number, the ZyXEL Device deletes half-open sessions as required to accommodate new connection attempts. ICMP Echo-Request Count This is the rate of new ICMP Echo-Request half-open sessions per second that causes the firewall to start deleting half-open sessions. When the rate of new connection attempts rises above this number, the ZyXEL Device deletes half-open sessions as required to accommodate new connection attempts. Back Click this button to return to the previous screen. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. 10.7 Firewall Technical Reference This section provides some technical background information about the topics covered in this chapter. 10.7.1 Firewall Rules Overview Your customized rules take precedence and override the ZyXEL Device's default settings. The ZyXEL Device checks the source IP address, destination IP address and IP protocol type of network traffic against the firewall rules (in the order you list them). When the traffic matches a rule, the ZyXEL Device takes the action specified in the rule. Firewall rules are grouped based on the direction of travel of packets to which they apply: • LAN to Router • LAN to WAN • WAN to LAN • WAN to Router Note: The LAN includes both the LAN port and the WLAN. By default, the ZyXEL Device's stateful packet inspection allows packets traveling in the following directions: • LAN to Router These rules specify which computers on the LAN can manage the ZyXEL Device (remote management). Note: You can also configure the remote management settings to allow only a specific computer to manage the ZyXEL Device. 176 ADSL Router Series User's Guide