User guide

Firewall command reference Firewall
4-127
iMG/RG Software Reference Manual (IPNetwork Functions)
Example --> firewall show validator v1 ext-int
Firewall Host Validator: v1
Direction: both
Host IP: 192.168.103.2
Host Mask: 255.255.255.0
See also FIREWALL ADD VALIDATOR
FIREWALL LIST VALIDATORS
FIREWALL LIST POLICIES
4.3.2.0.22 FIREWALL SET IDS VICTIMPROTECTION
Syntax firewall set IDS victimprotection <duration>
Description This command sets the duration of the victim protection Intrusion Detection Setting
(IDS). If victim protection is enabled, packets destined for the victim host of a spoofing
style attack are blocked. The command allows you to specify the duration of the block
time limit.
Note: This command is nothing but an alias of the corresponding “security set IDS” command
Options The following table gives the range of values for each option that can be specified with
this command and a Default Value (if applicable).
Example --> firewall set IDS victimprotection 800
See also security set ids victimprotection
4.3.2.0.23 FIREWALL SET IDS DOSATTACKBLOCK
Syntax firewall set IDS DOSATTACKBLOCK <DURATION>
policyname An existing firewall policy. To display policy names, use the
FIREWALL LIST POLICIES command.
N/A
Option Description Default Value
duration The length of time (in seconds) that packets destined for
the victim of a spoofing style attack. are blocked for.
600
(10 minutes)
Option Description Default Value