topic Re: IPF problems HPUX 11.11 in Operating System - HP-UX

IPF problems HPUX 11.11

Johan Wärlander_1 — Thu, 15 Sep 2005 03:04:48 GMT

Having problems with IPF on one of my HPUX servers.

It starts blocking all incomming traffic & reload of ipf kernel module only helps for a while. (app. 1 day)

Please see attachment for more detailed explanation of the problem.

Re: IPF problems HPUX 11.11

Orhan Biyiklioglu — Thu, 15 Sep 2005 03:20:37 GMT

Have you tried to verify the IPF package. Maybe some of the files are corrupted.

swverify -v B9901AA

Re: IPF problems HPUX 11.11

Johan Wärlander_1 — Thu, 15 Sep 2005 03:34:56 GMT

The package has been verified without any errors.

But thanks for your suggestion.

Re: IPF problems HPUX 11.11

Arunvijai_4 — Thu, 15 Sep 2005 03:38:56 GMT

Have you tried
# -Fi

Flushes only the IN rules in the specified rules file. ?

-Arun

Re: IPF problems HPUX 11.11

Johan Wärlander_1 — Thu, 15 Sep 2005 03:52:52 GMT

no, could you specify the syntax?

# -Fi?

did you mean:
# /sbin/ipf -Fi

Re: IPF problems HPUX 11.11

Arunvijai_4 — Thu, 15 Sep 2005 03:57:53 GMT

Yes, thats correct.

Re: IPF problems HPUX 11.11

Johan Wärlander_1 — Thu, 15 Sep 2005 05:12:09 GMT

Oki ill try that next time,

but is that not the same thing as running
-> /sbin/init.d/ipfboot stop
-> /sbin/init.d/ipfboot start

I mean the ruleas are flushed then aswell?!

Re: IPF problems HPUX 11.11

Arunvijai_4 — Thu, 15 Sep 2005 05:17:04 GMT

This document could be useful for troubleshooting,

http://docs.hp.com/en/B9901-90018/index.html

-Arun

Re: IPF problems HPUX 11.11

Johan Wärlander_1 — Thu, 15 Sep 2005 05:36:35 GMT

Thank you.

Re: IPF problems HPUX 11.11

Jim Keeble — Fri, 16 Sep 2005 08:56:15 GMT

If the rules look correct with ipfstat -io, maybe you've exceeded the size of the state table or some other limit.

I haven't used the size limits, but the config guide talks about it.

Re: IPF problems HPUX 11.11

Johan Wärlander_1 — Mon, 19 Sep 2005 01:05:53 GMT

Thanks for the tip. Ill check into this.

Had the same problem this morning arriving to work.