topic Re: IP forwarding in Operating System - HP-UX

IP forwarding

Andres Cuneo — Tue, 08 May 2001 15:38:51 GMT

Hello,

we want to disable the IP Forwarding in a HP9000 L class server running HP-UX 11.

Any idea how can we do it ??

Regards,

Andres

Re: IP forwarding

Denver Osborn — Wed, 09 May 2001 00:46:35 GMT

Use ndd.

To list current settings
# ndd -get /dev/ip ip_forwarding

To set to new value
# ndd -set /dev/ip ip_forwarding 0

The changes will be lost after a reboot unless you modify /etc/rc.config.d/nddconf file. To make the chages last add an entry similar to this in your nddconf file.

TRANSPORT_NAME[0]=ip
NDD_NAME[0]=ip_forwarding
NDD_VALUE[0]=0

ndd -c will apply changes from the nddconf.

For more information
'man ndd' and 'ndd -h ip_forwarding'

hope this helps
-denver

Re: IP forwarding

ken hubbard — Wed, 16 May 2001 13:55:03 GMT

I have a hp/ux 10.20 system and it doesn't have the ndd command. I use nettune. To display the current setting use nettune -l ip_forwarding. see man page for setting new value. I am not sure how to force this at boot time.

Re: IP forwarding

Abel Berger — Thu, 17 May 2001 19:15:47 GMT

You need to issue a ndd -set ip_forwarding 0 command.
The ndd set is not permanent but you can easily add it to one of the existing rc scripts or create a new one.

I hope help you !

Regards...

Abel Berger

Re: IP forwarding

Fabio Yamaia — Thu, 17 May 2001 21:30:40 GMT

After learning about disabling IP forwarding today on another thread, I did some investigation about nettune and ndd commands. On 10.20, for you to keep your configuration after a reboot, you have to edit the file [/sbin/init.d/net] and add the nettune command as follows:

- - -

##########
# main #
##########

case $1 in
start_msg)
print "Configure LAN interfaces"
exit $OKAY
;;

stop_msg)
print "Unconfigure LAN interfaces"
exit $OKAY
;;

stop)
exit $OKAY
;;

start)
/usr/contrib/bin/nettune -s ip_forwarding 0
;; # fall through

- - -

I haven't tested that solution myself, but it looks like it would work.

Regards,
Fabio Yamaia

Re: IP forwarding

Abel Berger — Fri, 18 May 2001 12:52:29 GMT

Hi, fabio
Very nice !

I go to keep this for me.

Regards,
Abel Berger