Block UDP Traffic

[brian_31]

Hi All:

I have 2 machines on the same subnet and i need to block the 2 machines from having UDP communication from each other. i am running 11.0.

Thanks

Brian

[Sundar_7]

Brian,

You will have to install IPFilter in one machine and configure it to reject all the traffic on the UDP from the specific machine.

You can download IPFilter from software.hp.com for free

- Sundar

[Mark Greene_1]

HP has a free software firewall:

http://www.software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B9901AA

mark

[Jeff_Traigle]

Just between these two machines or do you want to keep these systems from servicing any UDP traffic at all?

If the latter, I'd say the easiest way is to just disable all UDP protocols from /etc/inetd.conf and the various config files in /etc/rc.config.d.

If the former, then, depending on the specific protocol, there may have access restrictions you can put in place (the access= option for NFS, for instance). Or you can download, install, and configure host-based firewalls on these two systems so all UDP traffic is not allowed. IPFilter is available from HP's software site at:

http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B9901AA

[Prashant Zanwar_4]

Just one suggestion:

Also comment out all entries under /etc/services along with inetd.conf & inetd -c shall be giving you solution to good extent.
Thanks
Prashant

[brian_31]

I want to stop the udp between these two machines. that is all.

Thanks

Brian

[rick jones]

indeed, ipfilter sounds like the way to go. particularly if you only want to stop UDP between those two machines and let them do UDP elsewhere.

just editing the /etc/services or /etc/inetd.conf stuff will not preclude UDP traffic bewteen those systems - applications could still open SOCK_DGRAM sockets at will.

why is it you want to disable UDP between the two machines? this is the first time I've heard of someone wanting to do that so I'm a bit curious.

[brian_31]

we are using an application which uses UDP connection. we wanted to do a test and since these 2 servers are in the same subnet we can't do that test. the option is to change the ip but that is a BIG DEAL. so this is a workaround.

Thanks to all

Brian

[rick jones]

i take it you want to test your UDP application when there is no connectivity between the two machines?