Restrict source access for an internal port

[Vladimir SAnchez_1]

I need to restrict the access to the service given on port 7001 on a HP-UX 11i box. This service should be accessed only for a couple of web servers and no directly by anyone browsing to port 7001 on the server.
I thought using tcp-wrappers or the inetd.sec table, nut they are used for internal services and not for (in this case) a weblogic service. Am I right?

Regards,

Vladimir

[Steven E. Protter]

Sounds like an application for a firewall like ipfilter.

http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B9901AA

SEP

[harry d brown jr]

Block it at your network switch.

live free or die
harry d brown jr

[RAC_1]

Use of /var/adm/inetd.sec would be a effective and efficient solution to your problem.

In /var/adm/inetd.sec, pu as followinf.

"service_name" allo ip_address1, ipaddress2 and so on

Anil

[Biswajit Tripathy]

I would use IPFilter system firewall.
Configure the following IPFilter rules:

------
pass in quick proto tcp from IP1 to any port = 7001 flags S keep state keep frags
pass in quick proto tcp from IP2 to any port = 7001 flags S keep state keep frags
block in quick from any to any port = 7001
-------

Replace IP1 and IP2 with IP addresses of the
machines you want to allow using service.

If you are on HP-UX 11i v2 (aka 11.23),
IPFilter should already be installed on your
system. Otherwise, download it from the
location given in Steven's mail.

- Biswajit