topic Re: IPFILTER auto logout in Operating System - HP-UX

IPFILTER auto logout

samarah — Thu, 04 Mar 2010 08:15:17 GMT

Good Day!
i'm currently configuring ipfilter in my hpux 11.23 RP8420 server...i have created some rules and rules are working... but after 3 mins my session and ping will automatically logout..my problem is how can i turn off the auto logout?

Below is my rules...

block in all
pass in quick on lo0 from 10.123.45.47/32 to any
pass out quick on lo0 from 10.123.45.47/32 to any

Thanks,

Re: IPFILTER auto logout

Horia Chirculescu — Thu, 04 Mar 2010 08:20:37 GMT

Hello samarah,

If you are talking about session idle timeout, there is a shell variable that controls that.

See:
http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=197701

Horia.

Re: IPFILTER auto logout

samarah — Thu, 04 Mar 2010 08:26:10 GMT

thanks...

but this is IPFILTER related when i activate/loaded ng rules in /etc/opt/ipf/ipf.conf config and will it works and accessible for a while but after 3 mins.. may session were killed and automatically logout.. please take noted this only happens when i acivate the ipfilter...

any body knows on how to disable autologout? at the same i need the ipfilter still activated/enable.

Thanks,

Re: IPFILTER auto logout

Horia Chirculescu — Thu, 04 Mar 2010 09:20:08 GMT

>but this is IPFILTER related when i activate/loaded ng rules

You should check what it is happening when you enable ipf. Watch for rejected packets on lo0 (try to understand what services generated those packets).

Horia.

Re: IPFILTER auto logout

Jim Walls — Thu, 04 Mar 2010 23:53:53 GMT

lo0 is your loopback interface (127.0.0.1) - there should be no 10.0.0.0/8 trafic on it!

Do you not mean to put this rule on lan0?

Re: IPFILTER auto logout

samarah — Fri, 05 Mar 2010 02:05:42 GMT

this is may rule defined in /etc/opt/ipf/ipf.conf

# cat /etc/opt/ipf/ipf.conf
block in all
pass in from 10.123.45.47/32 to any
pass out from 10.123.45.47/32 to any

Is this correct or do i need to put any parameters?

Re: IPFILTER auto logout

Horia Chirculescu — Fri, 05 Mar 2010 10:51:35 GMT

># cat /etc/opt/ipf/ipf.conf
>block in all
>pass in from 10.123.45.47/32 to any
>pass out from 10.123.45.47/32 to any

Like this you are blocking all inbound/oubound traffic except for this host 10.123.45.47/32

You can activate logging (man ipf.conf) by using log option on your block action.

You can use ipmon to read the log.

Horia.