HP-UX 11i September 2005 Release Notes

Security
HP-UX IPFilter
Chapter 8
146
Obsolescence
Effective June 1, 2005, the support for Release 1.0 of HP-UX HIDS has been
discontinued. HP recommends that all customers using HP-UX HIDS 1.0 upgrade to
Release 3.0 / Release 3.1 immediately.
In addition, HP-UX HIDS v2. x has been deprecated and is planned for future
obsolescence. You are strongly encouraged to upgrade to the latest version of HIDS in
order to take advantage of all the latest enhancements and defect fixes. For further
details, refer to
http://www.hp.com/softwarereleases/releases-media2/discon/HIDS_V2x.pdf.
HP-UX IPFilter
The security product, HP-UX IPFilter version A.03.05.11.01, provides system firewall
capabilities by filtering IP packets to control traffic in and out of a system. The firewall
functions as a security defense by cutting down the number of exposure points on a
machine.
Summary of Change
HP-UX IPFilter has been updated to version A.03.05.11.01 to incorporate defect fixes.
Impact
There is no significant impact.
Compatibility
There are no known compatibility issues.
Performance
There are no known performance issues.
Documentation
For further information, refer to the following:
•Manpages:
ipf (4) packet filtering kernel interface
ipf (5) IP packet filter rule syntax
ipf (8) alters packet filtering kernel’s internal lists
ipl (4) data structure for IP packet log device
ipmon (8) monitors /dev/ipl for logged packets
ipfstat (8) reports on packet filter statistics and filter list