topic Re: ipfilter in Operating System - HP-UX

ipfilter

3M OS Support Team — Tue, 13 Sep 2005 11:57:02 GMT

I am trying to configure IpFilter on HPUX 11.x,

How do I block ports without having to specify each lan instance (we have several multiplexed) and the specific ip as opposed to a subnet

Re: ipfilter

Pat Lieberg — Tue, 13 Sep 2005 12:08:41 GMT

I recommend this document:

http://www.docs.hp.com/en/B9901-90021/index.html

Examples:

Block incoming traffic from a specific ip address on port 23 to any adapter:

block in on all proto tcp from 10.10.10.10 to any port = 23

Block outbound traffic to a specific ip address and port:

block out on all proto tcp from any to 10.10.10.10 port = 23

To flush and reread the ipf.conf:

ipf â Fa â f /etc/opt/ipf/ipf.conf

Re: ipfilter

Pat Lieberg — Tue, 13 Sep 2005 12:10:04 GMT

Noticed my copy and paste of the rules refresh line got messed up. Here it is again:

ipf -Fa -f /etc/opt/ipf/ipf.conf

Re: ipfilter

Geoff Wild — Tue, 13 Sep 2005 12:11:02 GMT

Check out:

http://docs.hp.com/en/B9901-90018/index.html

http://docs.hp.com/en/B9901-90018/ch03s01.html

I don't think you can block without a lan interface - that's the whole premise behind a firewall....

Rgds...Geoff

Re: ipfilter

3M OS Support Team — Tue, 13 Sep 2005 12:29:21 GMT

Kind of thought I was stuck with the lan instance assignments
Thanks

Re: ipfilter

Steve McClendon_1 — Wed, 14 Sep 2005 09:46:06 GMT

It would be kind of you to assign points in appreciation to the fine folks who offer their time and talent to help you by answering your questions.

Re: ipfilter

Florian Heigl (new acc) — Wed, 14 Sep 2005 12:48:18 GMT

Steve, he's been doing this for 9 years, I think he's at least consistent in assigning ;)

Re: ipfilter

3M OS Support Team — Wed, 14 Sep 2005 12:50:52 GMT

Sorry I just didn't jump right on it