IP forwarding

[Andres Cuneo]

Hello,

we want to disable the IP Forwarding in a HP9000 L class server running HP-UX 11.

Any idea how can we do it ??

Regards,

Andres

[Denver Osborn]

Use ndd.

To list current settings
# ndd -get /dev/ip ip_forwarding

To set to new value
# ndd -set /dev/ip ip_forwarding 0

The changes will be lost after a reboot unless you modify /etc/rc.config.d/nddconf file. To make the chages last add an entry similar to this in your nddconf file.

TRANSPORT_NAME[0]=ip
NDD_NAME[0]=ip_forwarding
NDD_VALUE[0]=0

ndd -c will apply changes from the nddconf.

For more information
'man ndd' and 'ndd -h ip_forwarding'

hope this helps
-denver

[ken hubbard]

I have a hp/ux 10.20 system and it doesn't have the ndd command. I use nettune. To display the current setting use nettune -l ip_forwarding. see man page for setting new value. I am not sure how to force this at boot time.

[Abel Berger]

You need to issue a ndd -set ip_forwarding 0 command.
The ndd set is not permanent but you can easily add it to one of the existing rc scripts or create a new one.

I hope help you !

Regards...

Abel Berger

[Fabio Yamaia]

After learning about disabling IP forwarding today on another thread, I did some investigation about nettune and ndd commands. On 10.20, for you to keep your configuration after a reboot, you have to edit the file [/sbin/init.d/net] and add the nettune command as follows:

- - -

##########
# main #
##########

case $1 in
start_msg)
print "Configure LAN interfaces"
exit $OKAY
;;

stop_msg)
print "Unconfigure LAN interfaces"
exit $OKAY
;;

stop)
exit $OKAY
;;

start)
/usr/contrib/bin/nettune -s ip_forwarding 0
;; # fall through

- - -

I haven't tested that solution myself, but it looks like it would work.

Regards,
Fabio Yamaia

[Abel Berger]

Hi, fabio
Very nice !

I go to keep this for me.

Regards,
Abel Berger