D-Link DFL-1600 User Manual page 47

5.1. Overview
Security Policy
Information about different actions triggered by the firewall's rules
are given in this category, including:
ACCEPT– packets accepted for further transmission.
FWD– packets statelessly forwarded.
DROP– packets disallowed.
Network Connection
Various traffic connections, routing status, and user activities record
for network environment debug and monitor fall into this category.
Both authorized services and rejected connections can be logged.
Normally, the name of the service (or protocol name) is used as the
Flag for the event in the log entry. The most common events within
this category are listed below.
USAGE
– periodical system usage statistics, such as bandwidth,
connections, and etc.
CONN
– state engine events, e.g. open/close connections.
NETCON
– administrator's remote management events.
IFACEMON
– interface monitor events.
DHCP/DHCPRELAY/DHCPSERVER
– events for DHCP client, relayer, or server.
ARP
– log messages coming from the ARP engine.
FRAG
– log messages coming from the fragment handling engine.
OSPF/DYNROUTING
– information for dynamic routing.
RFO
– route fail over events.
PPP/PPPOE/PPTP/L2TP/GRE/IPSEC
– events for different tunnels.
USERAUTH
– events for user authentication.
D-Link Firewalls User's Guide
27