topic IPFilter in Operating System - HP-UX

IPFilter

John Carver — Fri, 02 Apr 2004 13:14:27 GMT

All the examples in the IPFilter admin manual
show configuring a non-multiplexed lan card. Will IPFilter work with a lan card the has multiplexing setup? For example I would like to filter lan0:0 but leave lan0:1 unfiltered.
If I set up the inbound and outbound rules for lan0:0 and reload the rules, IPFilter takes the configuration but does not block certain traffic as expected.

Re: IPFilter

Thomas Bianco — Sat, 03 Apr 2004 17:18:29 GMT

This begs the question: why would you want to?

IPFilters are generally used to protect servers from untrusted networks. If your LAN card is multiplexed both IPs are physically accessible to the same networks.

This is akin to building a bank vault with a 6 inch thick steel vault door in the front, and a screen door that doesn't latch in the back.

Re: IPFilter

John Carver — Mon, 05 Apr 2004 17:18:48 GMT

Point well taken. This turned out to more of an exercise of can we to this rather than what does it accomplish. Thanks for the reply.