IPFilter/9000

[Mark Janssen]

I've read on the website that there is a (un-)supported version of IP-filter for HPUX, released by HP under the IP-Filter/9000 name. I've searched all my ux-11 cd's and the HP website, but can't find the software. Where can I find/get IPfilter/9000 so I can firewall my box.

[Joseph C. Denman]

I just saw this thread.

http://forums.itrc.hp.com/cm/QuestionAnswer/1,1150,0x6cfca12d6d27d5118fef0090279cd0f9,00.html

...jcd...

[Donna Snow]

HP has provided IPFilter/9000 with HP-UX 11.0 and 11i quarterly application releases on the application CD since March 2001.

It will be available for download in December from software depot, and continue to be in the application CD.

It is positioned as a system firewall. HP supports all features related to a system firewall.

[linuxfan]

Hi Mark,

The alpha release for HP-UX 11.0 can be downloaded from

http://coombs.anu.edu.au/~avalon/ipf-mentat.html

Do look at the pre-requisistes for running IP-Filter and also remember this is still in alpha-phase.

-HTH
Ramesh

[Santosh Nair_1]

Actually, the version of IP filters that ships from HP is also alpha...its version 3.5alpha. So you're probably better off getting the latest one from http://coombs.anu.edu.au/~avalon/ipf-mentat.html

even though you'll have to compile it from source.

-Santosh

[Berlene Herren]

Mark, my two cents. The HP version
(A.03.05.02) has many supported features of the public domain software.

Specifically, the HP unsupported features are:
- NAT utility:
o ipnat
- other commands and utilities:
o ipscan
o ipsyncs
o ipsyncm
o ipfs
o ipsend
o ipresend
- NAT related rules:
o map,
o bimap,
o rdr,
o fastroute
o ipnat.rules (configuration file)
- application proxy

IPFilter/9000 is not yet supported with IPv6 or MC/ServiceGuard.

Additional links supported for IPFilter/9000 version A.03.05.02 (available
December 2001) include APA, Gigabit Ethernet, and VLAN interfaces. Unsupported links are token ring and FDDI.

Berlene

[james mcintyre_1]

i am familar with ipchains and iptables. has anyone used ipfilter long enough to comment on its setup, functionality and usability ?

jim mc.....

[Alireza Assadzadeh]

The ipnat is the main functionality that we are trying to use.

It is not currently supported.

We have also tried using "IP Filter 4.0alpha18". That crashes the Kernal. We are working on it to get this supported on HP.

Alireza