Question on IP-Filtering

[Mike_305]

Hello,

I had to load ARPA patch and one of the things I ran into issue where I lend up removeing IP-Filter pkg.

My question is how do I determine if I am using IP-Filering or not?

Appreciate your help and thanks in advance.

Regards,

MJ

[Bill Hassell]

Because IPfilter requires a lot of configuration (and you didn't spend a lot of time reading the docs and deciding what to do), you are probably not using it. IPfilter has a bad history of creating system problems so removing it is a good thing. If you need IPfilter capabilities, you should look first at inetd.sec in the /var/adm directory. The man page is: man inetd.sec

[Cortes Albertino · Accepted solution]

Hi,

Try this...

# ipf -V
ipf: HP IP Filter: v3.5alpha5 (A.03.05.12) (376)
Kernel: HP IP Filter: v3.5alpha5 (A.03.05.12)
Running: yes
Log Flags: 0 = none set
Default: pass all, Logging: available
Active list: 1

# ipfstat -io
empty list for ipfilter(out)
empty list for ipfilter(in)

# ipfstat
dropped packets: in 0 out 0
non-data packets: in 0 out 0
no-data packets: in 0 out 0
non-ip packets: in 0 out 0
bad packets: in 0 out 0
copied messages: in 0 out 0
input packets: blocked 0 passed 0 nomatch 0 counted 0 short 0
output packets: blocked 0 passed 0 nomatch 0 counted 0 short 0
input packets logged: blocked 0 passed 0
output packets logged: blocked 0 passed 0
packets logged: input 0 output 0
log failures: input 0 output 0
fragment state(in): kept 0 lost 0
fragment state(out): kept 0 lost 0
packet state(in): kept 0 lost 0
packet state(out): kept 0 lost 0
TCP connections: in 0 out 0
ICMP replies: 0 TCP RSTs sent: 0
Invalid source(in): 0
Result cache hits(in): 0 (out): 0
IN Pullups succeeded: 0 failed: 0
OUT Pullups succeeded: 0 failed: 0
Fastroute successes: 0 failures: 0
TCP cksum fails(in): 0 (out): 0
Packet log flags set: (0)
none


Hope it helps,

Albertino

[Mike_305]

Thanks for your help.

Regards,

MJ