https://community.hpe.com/t5/operating-system-hp-ux/ipfilter-and-ifconfig/m-p/3102049#M751668 Question to you all. I was talking with some folks on the IPFilter team, and there is a question about how people tend to use it, specifically with ifconfig.<BR /><BR />The current way that an IPFilter module is plumbed into an interface is automatic... which always exacts a &lt;2% performance hit, but also protects the interface (if there are associated IPFilter rules).<BR /><BR />Is it common within your experience to use IPFilter, but not on every interface?<BR /><BR />Should the default be to plumb/install it on every interface and take the performance hit if IPfilter is installed? <BR /><BR />How often do you use ifconfig to bring up an interface (vs. net stop/start) vs. editing /etc/rc.config.d/netconf and rebooting? <BR /><BR />Would you expect ifconfig to load IPFilter and protect the interface by default, or use a "-m <MODULE>" switch to load the interface explicitly? What would you prefer?</MODULE> Fri, 24 Oct 2003 19:21:32 GMT Robert Fritz 2003-10-24T19:21:32Z https://community.hpe.com/t5/operating-system-hp-ux/ipfilter-and-ifconfig/m-p/3102049#M751668 Question to you all. I was talking with some folks on the IPFilter team, and there is a question about how people tend to use it, specifically with ifconfig.<BR /><BR />The current way that an IPFilter module is plumbed into an interface is automatic... which always exacts a &lt;2% performance hit, but also protects the interface (if there are associated IPFilter rules).<BR /><BR />Is it common within your experience to use IPFilter, but not on every interface?<BR /><BR />Should the default be to plumb/install it on every interface and take the performance hit if IPfilter is installed? <BR /><BR />How often do you use ifconfig to bring up an interface (vs. net stop/start) vs. editing /etc/rc.config.d/netconf and rebooting? <BR /><BR />Would you expect ifconfig to load IPFilter and protect the interface by default, or use a "-m <MODULE>" switch to load the interface explicitly? What would you prefer?</MODULE> Fri, 24 Oct 2003 19:21:32 GMT https://community.hpe.com/t5/operating-system-hp-ux/ipfilter-and-ifconfig/m-p/3102049#M751668 Robert Fritz 2003-10-24T19:21:32Z