[HP-UX] - Dynamically Block Ping to a IP

[Chauhan Amit]

Hi,

I would like to be able to dynamically
block Ping to a particular IP.
By "dynamic", I mean that most of the time
that host would be allowed connect, but
occassionaly for a few hours that host would
not be allowed to connect (preferably with
no host response at all).

* something Similar to route reject in Linux

Suggestions? Thanks

[Duncan Edmonstone]

I'd imagine IPFilter will do what you require. It's freely available here:

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B9901AA

I'm afraid you will have to look to other on how to use it.

HTH

Duncan

[Maxim Yakimenko]

Use IPFilter and for exapmle cron or at to "dynamically" add and delete firewall rules

[John Payne_2]

Assuming you want to use IPFilter:

To block ping to the address:

block out quick proto icmp from any to xx.xx.xx.xx/32

To block everything to the address:

block out quick from any to xx.xx.xx.xx/32


But what I assume you are really asking for is to prevent that IP from talking to your server, which makes the rule a little different:

To block ping from the remote IP:

block in quick proto icmp from xx.xx.xx.xx/32 to any

To block everything from the remote IP

block in quick from xx.xx.xx.xx/32 to any

Hope it helps


John