topic Port blocking in Operating System - HP-UX

Port blocking

YLTan — Mon, 19 Aug 2002 01:09:49 GMT

I have an application server which uses TCP/IP. It have client sitting on PC accessing it via application client s/w. The client make connecttion to the server via a port number 11960. There a many cfg files in the apps which have such entries. Now and then i need to do maintenance on the server apps. but user still connects to it when maintenance is going on.

Is there a way to block the port number for those client PC and only allow the sys.admin PC to connect to the apps. server at UNIX system level? I notice inetd.sec blocks only know services.

Re: Port blocking

Michael Tully — Mon, 19 Aug 2002 01:39:26 GMT

Hi,

You could try installing 'IPF/9000'. The product number is B9901AA and can be found on your application CD set.

If you don't have it installed already from your CD's you can download it from here: http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProducts.pl?group_type=search&group_name=IPF&search_free=1&search_trial=1&search_buy=1

As an alternative, you could block the access from your router/switch for that port.

HTH
Michael

Re: Port blocking

rick jones — Tue, 20 Aug 2002 16:44:05 GMT

While IPfilter can indeed be used to do what you want, it is a rather broad club and seems that it would only be covering-up a failing in the server application - that it cannot be told to disallow client connections while undergoing maintenance.

You may want to talk to the server application provider about enhancing their product.