HP-UX IPFilter A.03.05.13 Administrator's Guide: HP-UX 11i v3

193
IPSec
allowing protocol 50 and 51 traffic through
,
132
allowing traffic through the firewall, 131
bidirectional with IPFilter, 130
debugging blocked traffic with, 131
gateway, 134
UDP negotiation, 129
IPSec and IPFilter, 127
K
kadmin -s
, 13
kcmodule
static linking
, 177
kctune, 17
keep frags keyword, 46
keep limit
keyword, 57
keep limit rules
adding, 67
adding a subnet or IP address range rule, 68
adding individual rule, 67
changing current rule, 66
extracting, 68
integrating, 68
rule hits, 64
updating, 66
updating a subnet or IP address range, 67
keep state
ICMP, 77
keyword, 44, 74
state table dump, 96
when to use, 74
keeping state
UDP, 76
with servers and flags, 74
kernel tunables
configuring
, 17
fr_statemax, 15
fr_tcpidletimeout, 14
ipl_buffer_sz, 16
ipl_logall, 17
ipl_suppress, 17
keywords
bimap, 50
block, 36
dup-to, 48
flags, 45
from, 38
icmp-type, 41
in, 36
ipopts, 40
keep frags, 46
keep limit, 57
keep state, 44
log, 39, 78
log limit, 59
log limit freq, 61
map, 49
map-block, 51
on, 37
opt, 40
out, 36
pass, 36
port, 43
portmap, 49
proto, 40
quick, 37
rdr, 50
return-icmp, 47
return-rst, 47
to, 38, 83
with frags, 46
with short, 46
L
limiting connections
by IP address
, 57
by subnet, 57, 58
cumulative, 58
default individual limit, 59
loading software, 5
localhost filtering, 82
log keyword, 39, 78
body option, 79
first option, 79
log limit freq keyword, 61
log limit keyword, 59
logging, 22
drop-safe, 83
packets, 39
problems, 23
logging exceeded connections, 59
logging techniques, 78
M
map keyword
, 49
map-block keyword, 51