IPFILTER auto logout

[samarah]

Good Day!
i'm currently configuring ipfilter in my hpux 11.23 RP8420 server...i have created some rules and rules are working... but after 3 mins my session and ping will automatically logout..my problem is how can i turn off the auto logout?

Below is my rules...

block in all
pass in quick on lo0 from 10.123.45.47/32 to any
pass out quick on lo0 from 10.123.45.47/32 to any

Thanks,

[Horia Chirculescu]

Hello samarah,

If you are talking about session idle timeout, there is a shell variable that controls that.

See:
http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=197701

Horia.

[samarah]

thanks...

but this is IPFILTER related when i activate/loaded ng rules in /etc/opt/ipf/ipf.conf config and will it works and accessible for a while but after 3 mins.. may session were killed and automatically logout.. please take noted this only happens when i acivate the ipfilter...

any body knows on how to disable autologout? at the same i need the ipfilter still activated/enable.

Thanks,

[Horia Chirculescu]

>but this is IPFILTER related when i activate/loaded ng rules

You should check what it is happening when you enable ipf. Watch for rejected packets on lo0 (try to understand what services generated those packets).

Horia.

[Jim Walls]

lo0 is your loopback interface (127.0.0.1) - there should be no 10.0.0.0/8 trafic on it!

Do you not mean to put this rule on lan0?

[samarah]

this is may rule defined in /etc/opt/ipf/ipf.conf

# cat /etc/opt/ipf/ipf.conf
block in all
pass in from 10.123.45.47/32 to any
pass out from 10.123.45.47/32 to any

Is this correct or do i need to put any parameters?

[Horia Chirculescu]

># cat /etc/opt/ipf/ipf.conf
>block in all
>pass in from 10.123.45.47/32 to any
>pass out from 10.123.45.47/32 to any


Like this you are blocking all inbound/oubound traffic except for this host 10.123.45.47/32

You can activate logging (man ipf.conf) by using log option on your block action.

You can use ipmon to read the log.

Horia.