cancel
Showing results for 
Search instead for 
Did you mean: 

Question on IP-Filtering

SOLVED
Go to solution
Mike_305
Super Advisor

Question on IP-Filtering

Hello,

I had to load ARPA patch and one of the things I ran into issue where I lend up removeing IP-Filter pkg.

My question is how do I determine if I am using IP-Filering or not?

Appreciate your help and thanks in advance.

Regards,

MJ
If there is problem then don't think as problem, think as opportunity.
3 REPLIES
Bill Hassell
Honored Contributor

Re: Question on IP-Filtering

Because IPfilter requires a lot of configuration (and you didn't spend a lot of time reading the docs and deciding what to do), you are probably not using it. IPfilter has a bad history of creating system problems so removing it is a good thing. If you need IPfilter capabilities, you should look first at inetd.sec in the /var/adm directory. The man page is: man inetd.sec


Bill Hassell, sysadmin
Cortes Albertino
Trusted Contributor
Solution

Re: Question on IP-Filtering

Hi,

Try this...

# ipf -V
ipf: HP IP Filter: v3.5alpha5 (A.03.05.12) (376)
Kernel: HP IP Filter: v3.5alpha5 (A.03.05.12)
Running: yes
Log Flags: 0 = none set
Default: pass all, Logging: available
Active list: 1

# ipfstat -io
empty list for ipfilter(out)
empty list for ipfilter(in)

# ipfstat
dropped packets: in 0 out 0
non-data packets: in 0 out 0
no-data packets: in 0 out 0
non-ip packets: in 0 out 0
bad packets: in 0 out 0
copied messages: in 0 out 0
input packets: blocked 0 passed 0 nomatch 0 counted 0 short 0
output packets: blocked 0 passed 0 nomatch 0 counted 0 short 0
input packets logged: blocked 0 passed 0
output packets logged: blocked 0 passed 0
packets logged: input 0 output 0
log failures: input 0 output 0
fragment state(in): kept 0 lost 0
fragment state(out): kept 0 lost 0
packet state(in): kept 0 lost 0
packet state(out): kept 0 lost 0
TCP connections: in 0 out 0
ICMP replies: 0 TCP RSTs sent: 0
Invalid source(in): 0
Result cache hits(in): 0 (out): 0
IN Pullups succeeded: 0 failed: 0
OUT Pullups succeeded: 0 failed: 0
Fastroute successes: 0 failures: 0
TCP cksum fails(in): 0 (out): 0
Packet log flags set: (0)
none


Hope it helps,

Albertino
Mike_305
Super Advisor

Re: Question on IP-Filtering

Thanks for your help.

Regards,

MJ
If there is problem then don't think as problem, think as opportunity.