How disable ipfilter on hp-ux 11.31

[seenivasan]

#ipfilter -q
IPFilter Enabled and filtering

I disabled the firewall by running “ipfilter –d”, but I have no idea how to stop this from running again the next time the server is rebooted.

The man page doesn’t give much detail on this firewall or how to configure it:

Regards,
Seenivasan

[Patrick Wallek · Accepted solution]

Check the /etc/rc.config.d directory for an 'ipfilter' file.

The contents of this file should control whether or not IPFilter is started when the system is booted.

[Ismail Azad]

Hi,

Adding to JRF, the exact file on HPUX 11.31 on any environment would be /etc/rc.config.d/ipfconf..... You will see one control variable called as IPF_START, setting it to 0 would mean disabling it. Most probably you will see 1 on that field from the output you have shown. The startup script looks like /sbin/init.d/ipfboot which would check the file /etc/rc.config.d/ipfconf at the time of boot which is what enables or disables your IP Filter service!.

Regards
Ismail Azad

[Ismail Azad]

Hi,

> sorry I meant adding to Patrick {not JRF}...

Just one general thing I'd like to add , don't mess with the startup script /sbin/init.d/ipfboot while trying to enable or "disable" a service, instead always change "contol variables" in the configuration file. Do not touch startup script for this purpose as HPUX boots with these startup scripts always "looking into" the configuration files.

Regards
Ismail Azad

[seenivasan]

in ipfilter how to allow ports?

[nijokj]

kindly refer this url for detailed description.
http://www.netbsd.org/docs/network/nsps/config_ipf.html

[Manix]

port: Filtering on TCP and UDP Ports

In addition to filtering network traffic by protocol, you can use IPFilter to block traffic on specific ports used by a protocol. You can pass or block traffic on a specific port, such as a well-known port used by a service like
telnet or rlogin.
For example, you can block incoming telnet traffic with the following
rule:
block in log quick on lan0 proto tcp from any to 20.20.20.0/24
port = 23


http://docs.hp.com/en/B9901-90029/B9901-90029.pdf

Do read pg42 onwards for the more description.

Thanks
Manix