Port blocking

[YLTan]

I have an application server which uses TCP/IP. It have client sitting on PC accessing it via application client s/w. The client make connecttion to the server via a port number 11960. There a many cfg files in the apps which have such entries. Now and then i need to do maintenance on the server apps. but user still connects to it when maintenance is going on.

Is there a way to block the port number for those client PC and only allow the sys.admin PC to connect to the apps. server at UNIX system level? I notice inetd.sec blocks only know services.

[Michael Tully · Accepted solution]

Hi,

You could try installing 'IPF/9000'. The product number is B9901AA and can be found on your application CD set.

If you don't have it installed already from your CD's you can download it from here: http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProducts.pl?group_type=search&group_name=IPF&search_free=1&search_trial=1&search_buy=1

As an alternative, you could block the access from your router/switch for that port.

HTH
Michael

[rick jones]

While IPfilter can indeed be used to do what you want, it is a rather broad club and seems that it would only be covering-up a failing in the server application - that it cannot be told to disallow client connections while undergoing maintenance.

You may want to talk to the server application provider about enhancing their product.