Chapter 29 Secure Policy
ZyWALL Series CLI Reference Guide
239
icmp-decoder {bad-icmp-
l4-size | icmp-fragment
| icmp-smurf} log
[alert]
Sets icmp decoder log or alert options.
no icmp-decoder {bad-
icmp-l4-size icmp-
fragment | icmp-smurf}
log
Deactivates icmp decoder log options.
icmp-decoder {bad-icmp-
l4-size | icmp-fragment
| icmp-smurf} action
{drop | reject-sender |
reject-receiver |
reject-both}
Sets icmp decoder action.
no icmp-decoder {bad-
icmp-l4-size | icmp-
fragment | icmp-smurf}
action
Deactivates icmp decoder actions.
[no] ip-decoder {ip-
spoof | ip-teardrop}
activate
Activates or deactivates ip decoder options.
[no] ip-decoder {ip-
spoof | ip-teardrop}
log
Activates or deactivates ip decoder log options.
[no] ip-decoder {ip-
spoof | ip-teardrop}
action {drop | reject-
sender | reject-
receiver | reject-both}
Activates or deactivates ip decoder actions.
exit
Use exit to quit sub-command mode.
show idp anomaly profile
scan-detection [all
details]
Shows all scan-detection settings of the specified ADP profile.
show idp anomaly profile
scan-detection {tcp-
portscan | tcp-portscan-syn
| tcp-portsweep | tcp-
portscan-fin} details
Shows selected TCP scan-detection settings for the specified ADP profile.
show idp anomaly profile
scan-detection {udp-
portscan} details
Shows UDP scan-detection settings for the specified ADP profile.
show idp anomaly profile
flood-detection [all
details]
Shows all flood-detection settings for the specified ADP profile.
show idp anomaly profile
flood-detection {tcp-flood
| udp-flood | icmp-flood |
icmp-flood} details
Shows flood-detection settings for the specified ADP profile.
show idp anomaly profile
tcp-decoder all details
Shows tcp-decoder settings for the specified ADP profile.
Table 122 ADP Add/Edit Profile Commands (continued)
LABEL DESCRIPTION