topic Re: Mutli-Homed Server: Possible to assigne /etc/services port to specific LAN/NIC? in Operating System - HP-UX

Mutli-Homed Server: Possible to assigne /etc/services port to specific LAN/NIC?

Alzhy — Thu, 10 Jun 2004 11:42:37 GMT

We've a multi-homed server (2 NICs/APA's).. we need to restrict a port to only one LAN segment/NIC. Is this possible on HP-UX? How?

THanks!

Re: Mutli-Homed Server: Possible to assigne /etc/services port to specific LAN/NIC?

Jeff Schussele — Thu, 10 Jun 2004 11:54:47 GMT

Hi Nelson,

Only way I could see to do this would be with a "standard" service defined in inetd.conf.
You could restrict access to a specific subnet via inetd.sec or tcp-wrappers & hosts.allow/hosts.deny. Then as long as the network routed this traffic into the server properly, it would only come in the one NIC.

Else the network would have to play a role in this with it's routing rules such that the traffic in question could only be presented to the NIC in question.

Rgds,
Jeff

Re: Mutli-Homed Server: Possible to assigne /etc/services port to specific LAN/NIC?

RAC_1 — Thu, 10 Jun 2004 12:30:52 GMT

I can think of two options here.

Heard ipfiler product(free), install that and you can define ip filter rules, so as to allow/deny requests on nics.

With web server like apache, you can have directive as listen xx.xx.xxx.xx, this way apache will listen only on that ip, else will listen on nics a system has.

Anil