TCP/IP Outbound Security

[Chaz Sliger_1]

Is there a way to limit/filter the outbound TCP connections/traffic from within the system? TCP Wrappers appear to handle only the inbound side.
-chaz

[Christopher Caldwell · Accepted solution]

check out ipchains/ipfilter

[Steven Sim Kok Leong]

Hi,

Not to forget, at the application level, you have /var/adm/inetd.sec to restrict IP addresses you allow connections from, such as for omniback, r-services such as rlogin, telnet, ftp etc.

/var/adm/inetd.sec is a HP-UX security feature straight out of the box.

Hope this helps. Regards.

Steven Sim Kok Leong
Brainbench MVP for Unix Admin
http://www.brainbench.com

[Sundar_7]

I dont think U will be able to restrict the outbound traffic to certain boxes with the thing that is already there in HP-UX..

But U can always disable certain services from /etc/services..But that is going to totally going to disable the service and not going to disable the out bound traffic on certain machines..

Only way possible might be putting a Firewall or using TCP/IP wrappers /IP Filters

Sundar