ipfilter

[3M OS Support Team]

I am trying to configure IpFilter on HPUX 11.x,

How do I block ports without having to specify each lan instance (we have several multiplexed) and the specific ip as opposed to a subnet

[Pat Lieberg · Accepted solution]

I recommend this document:

http://www.docs.hp.com/en/B9901-90021/index.html

Examples:

Block incoming traffic from a specific ip address on port 23 to any adapter:

block in on all proto tcp from 10.10.10.10 to any port = 23

Block outbound traffic to a specific ip address and port:

block out on all proto tcp from any to 10.10.10.10 port = 23

To flush and reread the ipf.conf:

ipf â Fa â f /etc/opt/ipf/ipf.conf

[Pat Lieberg]

Noticed my copy and paste of the rules refresh line got messed up. Here it is again:

ipf -Fa -f /etc/opt/ipf/ipf.conf

[Geoff Wild]

Check out:

http://docs.hp.com/en/B9901-90018/index.html

http://docs.hp.com/en/B9901-90018/ch03s01.html

I don't think you can block without a lan interface - that's the whole premise behind a firewall....

Rgds...Geoff

[3M OS Support Team]

Kind of thought I was stuck with the lan instance assignments
Thanks

[Steve McClendon_1]

It would be kind of you to assign points in appreciation to the fine folks who offer their time and talent to help you by answering your questions.

[Florian Heigl (new acc)]

Steve, he's been doing this for 9 years, I think he's at least consistent in assigning ;)

[3M OS Support Team]

Sorry I just didn't jump right on it