Packetfilter on HP-UX 11.00

[CPHVF-U Guard]

Hi.

I would like to allow telnet[1] through our firewall to a single host, from that host it must not be possible to telnet/ftp/r* to other hosts (same network).

I guess I need some packet-filtering here...

In linux I would do something like:
iptables -A OUTPUT --d-port 23 -j DENY

How do I do that in HP-UX?

[1] I know about ssh, but it don't change the question.

[Santosh Nair_1 · Accepted solution]

Not sure if you looked at inetd.sec to see if that fits your needs.

If not, IPFiltering is "available" for HP-UX, but right now its in alpha. I believe HP is even shipping the alpha code on the latest application CD. Otherwise, you can download the code from (although this may not be an option for you) :

http://coombs.anu.edu.au/~avalon/

-Santosh

[CPHVF-U Guard]

Thanks,

We have ~100 HP-UX servers.
I would prefer a packet-filter, compared to inetd.sec.

I will have a look on the latest CD.

[CPHVF-U Guard]

Uuups,

Do you know the name of the product to install?

[Santosh Nair_1]

From the June 2001 HP 11.0 applications CD (disk 1):

B9901AA A.03.05.01 HP IPFilter 3.5alpha5

I'm not sure how stable it is though and I've never had the chance to actually use it, so I'm not sure I'd really recommend using it.

-Santosh