IPF problems HPUX 11.11

[Johan Wärlander_1]

Having problems with IPF on one of my HPUX servers.

It starts blocking all incomming traffic & reload of ipf kernel module only helps for a while. (app. 1 day)

Please see attachment for more detailed explanation of the problem.

[Orhan Biyiklioglu]

Have you tried to verify the IPF package. Maybe some of the files are corrupted.

swverify -v B9901AA

[Johan Wärlander_1]

The package has been verified without any errors.

But thanks for your suggestion.

[Arunvijai_4]

Have you tried
# -Fi

Flushes only the IN rules in the specified rules file. ?

-Arun

[Johan Wärlander_1]

no, could you specify the syntax?

# -Fi?

did you mean:
# /sbin/ipf -Fi

[Arunvijai_4]

Yes, thats correct.

[Johan Wärlander_1]

Oki ill try that next time,

but is that not the same thing as running
-> /sbin/init.d/ipfboot stop
-> /sbin/init.d/ipfboot start

I mean the ruleas are flushed then aswell?!

[Arunvijai_4]

This document could be useful for troubleshooting,

http://docs.hp.com/en/B9901-90018/index.html

-Arun

[Johan Wärlander_1]

Thank you.

[Jim Keeble]

If the rules look correct with ipfstat -io, maybe you've exceeded the size of the state table or some other limit.

I haven't used the size limits, but the config guide talks about it.

[Johan Wärlander_1]

Thanks for the tip. Ill check into this.

Had the same problem this morning arriving to work.