Can you lock a port for specific IP addresses?

[oogiejonz]

Is there a way on HP-UX to lock down access to a port from only certain IP addresses? Is there a UNIX access restriction product or process that would allow only certain IP addresses to get to certain ports ?

[Rita C Workman]

You don't say what port...but maybe inetd.sec could be a quick simple help.

If you wanted to lock out any telnet sessions from anyone in the 10.10.20.x subnet you could put:
telnet deny 10.10.20.*

Or if you only wanted to allow ftp from two select IP's you could put:

ftp allow 10.10.20.111 10.10.30.222

Read the instructions inside the inetd.sec file. I'm sure others can offer more suggestions. Not to mention controlling things at the network (router/firewall) level.

Rgrds,
Rita

[YAQUB_1]

Hi,

Yap, U can do it. U can HP-UX internal tool "nettill" (check man page) or U can install third party tool like "Ethereal" Network Analyzer.

Help link:-
==========
"HP-UX IPFilter Version 15.01 Administrator's
Guide" (http://docs.hp.com/en/B9901-90042/ch05s01.html)

BR/
Yaqub

[rick jones]

nettl and ethereal (or wireshark or tcpdump) are only tracing tools, not access control tools. ipfilter though is what one would probably want to use to restrict access to ports (based on IP address.