ip_forwarding on HP-UX 11.i

[henk baars]

Hello HP-UX admins.
I have a problem with ip-forwarding. I need to turn it off - I use ndd and that works fine (set to 0). But the next day somehow ip_forwarding is reset to the default (2). The server is not rebooted (I also configured nddconf) and netstat shows there is no ip_forwarding. Any ideas?

[Jeeshan]

Hi henk

read this link

http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=980692

[henk baars]

I read the link, but it doesnt offer me an answer. I can disable ip-forwarding without any problem with ndd (to 0), but after a day the value I set is changed back to the default (2). I am looking for the cause of that.

[Jeeshan]

check the configuration file in /etc/rc.config.d/nddconf.

[Asif Sharif]

Hi Henk,
see the below thread.
http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=744441
http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=931349
http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1006784

Regards,
Asif Sharif

[henk baars]

my ndd configuration is correct. ndd -c sets the value back to 0. I still dont know how/why it is reset to 2.

[Jeeshan]

post this output

#ll /usr/bin/ndd

[Jeeshan]

and also check the file

#ll /etc/rc.config.d/nddconf

[Jeeshan]

i'm afraid that you have corrupted net file. please verify the /sbin/init.d/net file.

[Laurent Menase]

ndd -a was called
Did you made an ignite tape recovery, if yes, update your ignite version.
-a option is a hidden option which reset some ndd params to a predefined value
ip_forwarding is reset to 2.
Some other are changed, so you may need to call again ndd -c

-a option should only be used at boot time by rc2.d/S008net.init, but unfortunately some ignite version may call it.

[henk baars]

Yes, it is the ignite tape backup that causes this. Thanks! I think we just have to upgrade the ignite version, hoping this is not a feature in later releases.

[Asif Sharif]

Hi Baars,

Please assign the points who helped you.

Regards,
Asif Sharif

[Laurent Menase]

It is fixed with up to date versions