HP-UX IPFilter A.03.05.14 Release Notes

HP-UX IPFilter Release Notes
Enhancements
Chapter 114
Enhancements
IPv6 Support
IPv6 support has been added to HP-UX IPFilter. The following IPv6 features are included:
• Provides IPv6 equivalent filtering for IPv6 while maintaining IPv4 support:
— Filtering on IPv6 addresses, address-ranges, and prefixes
— Filtering on ports and port ranges
— Filtering on IPv6 physical interfaces
— Filtering on ULP (TCP/UDP/ICMP)
— Filtering using any combination of these
• Stateful Filtering for TCP (limited for UDP and ICMPv6)
• IPv6 fragmentation support (ability to block fragmented traffic)
• Filter on extension headers:
— Filter packets with specific extension headers
• Filter on v6-in-v4 filtered traffic and v6-in-v6 traffic
• Detect IPSec headers (ah/esp) and pass if it matches a pass rule or block if it matches a
block
• Provide IPv6 filter statistics
• Neighbor discovery (ICMPv6 rules to pass critical ICMPv6 messages)
• Recognize and filter on new ICMPv6 messages
For more information, see the HP-UX IPFilter A.03.05.14 Administrator’s Guide.