topic Re: Packetfilter on HP-UX 11.00 in Operating System - HP-UX

Packetfilter on HP-UX 11.00

CPHVF-U Guard — Mon, 17 Sep 2001 10:22:18 GMT

Hi.

I would like to allow telnet[1] through our firewall to a single host, from that host it must not be possible to telnet/ftp/r* to other hosts (same network).

I guess I need some packet-filtering here...

In linux I would do something like:
iptables -A OUTPUT --d-port 23 -j DENY

How do I do that in HP-UX?

[1] I know about ssh, but it don't change the question.

Re: Packetfilter on HP-UX 11.00

Santosh Nair_1 — Mon, 17 Sep 2001 10:56:36 GMT

Not sure if you looked at inetd.sec to see if that fits your needs.

If not, IPFiltering is "available" for HP-UX, but right now its in alpha. I believe HP is even shipping the alpha code on the latest application CD. Otherwise, you can download the code from (although this may not be an option for you) :

http://coombs.anu.edu.au/~avalon/

-Santosh

Re: Packetfilter on HP-UX 11.00

CPHVF-U Guard — Mon, 17 Sep 2001 11:34:18 GMT

Thanks,

We have ~100 HP-UX servers.
I would prefer a packet-filter, compared to inetd.sec.

I will have a look on the latest CD.

Re: Packetfilter on HP-UX 11.00

CPHVF-U Guard — Mon, 17 Sep 2001 11:55:22 GMT

Uuups,

Do you know the name of the product to install?

Re: Packetfilter on HP-UX 11.00

Santosh Nair_1 — Mon, 17 Sep 2001 12:10:59 GMT

From the June 2001 HP 11.0 applications CD (disk 1):

B9901AA A.03.05.01 HP IPFilter 3.5alpha5

I'm not sure how stable it is though and I've never had the chance to actually use it, so I'm not sure I'd really recommend using it.

-Santosh