topic Re: Block UDP Traffic in Operating System - HP-UX

Block UDP Traffic

brian_31 — Thu, 07 Oct 2004 13:25:01 GMT

Hi All:

I have 2 machines on the same subnet and i need to block the 2 machines from having UDP communication from each other. i am running 11.0.

Thanks

Brian

Re: Block UDP Traffic

Sundar_7 — Thu, 07 Oct 2004 13:39:13 GMT

Brian,

You will have to install IPFilter in one machine and configure it to reject all the traffic on the UDP from the specific machine.

You can download IPFilter from software.hp.com for free

- Sundar

Re: Block UDP Traffic

Mark Greene_1 — Thu, 07 Oct 2004 13:41:35 GMT

HP has a free software firewall:

http://www.software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B9901AA

mark

Re: Block UDP Traffic

Jeff_Traigle — Thu, 07 Oct 2004 13:41:51 GMT

Just between these two machines or do you want to keep these systems from servicing any UDP traffic at all?

If the latter, I'd say the easiest way is to just disable all UDP protocols from /etc/inetd.conf and the various config files in /etc/rc.config.d.

If the former, then, depending on the specific protocol, there may have access restrictions you can put in place (the access= option for NFS, for instance). Or you can download, install, and configure host-based firewalls on these two systems so all UDP traffic is not allowed. IPFilter is available from HP's software site at:

http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B9901AA

Re: Block UDP Traffic

Prashant Zanwar_4 — Thu, 07 Oct 2004 14:04:06 GMT

Just one suggestion:

Also comment out all entries under /etc/services along with inetd.conf & inetd -c shall be giving you solution to good extent.
Thanks
Prashant

Re: Block UDP Traffic

brian_31 — Thu, 07 Oct 2004 15:53:27 GMT

I want to stop the udp between these two machines. that is all.

Thanks

Brian

Re: Block UDP Traffic

rick jones — Thu, 07 Oct 2004 18:51:50 GMT

indeed, ipfilter sounds like the way to go. particularly if you only want to stop UDP between those two machines and let them do UDP elsewhere.

just editing the /etc/services or /etc/inetd.conf stuff will not preclude UDP traffic bewteen those systems - applications could still open SOCK_DGRAM sockets at will.

why is it you want to disable UDP between the two machines? this is the first time I've heard of someone wanting to do that so I'm a bit curious.

Re: Block UDP Traffic

brian_31 — Thu, 07 Oct 2004 19:10:48 GMT

we are using an application which uses UDP connection. we wanted to do a test and since these 2 servers are in the same subnet we can't do that test. the option is to change the ip but that is a BIG DEAL. so this is a workaround.

Thanks to all

Brian

Re: Block UDP Traffic

rick jones — Thu, 07 Oct 2004 19:49:00 GMT

i take it you want to test your UDP application when there is no connectivity between the two machines?