HP-UX IPFilter V17.05 Administrator Guide HP-UX 11i v2 and HP-UX 11i v3
9 Troubleshooting HP-UX IPFilter....................................................................53
9.1 Viewing IPFilter statistics and active rules with ipfstat...............................................................53
9.1.1 Syntax.......................................................................................................................53
9.1.2 Options....................................................................................................................53
9.1.3 Examples..................................................................................................................54
9.2 Testing rules with ipftest.....................................................................................................57
9.2.1 Syntax......................................................................................................................57
9.2.2 Options...................................................................................................................57
9.2.3 Example...................................................................................................................58
9.3 Logging IPFilter packets......................................................................................................60
9.3.1 Using the log keyword to configure IPFilter logging.........................................................60
9.3.1.1 level log-level......................................................................................................60
9.3.1.2 first...................................................................................................................61
9.3.1.3 body.................................................................................................................61
9.3.2 Using ipmon to view IPFilter log entries.........................................................................61
9.3.2.1 Syntax..............................................................................................................62
9.3.2.2 Options............................................................................................................62
9.3.2.3 Examples..........................................................................................................62
9.3.2.4 ipmon and DCA logging....................................................................................63
9.3.3 Analyzing IPFilter log events........................................................................................63
9.3.3.1 Syntax..............................................................................................................63
9.3.3.2 ipmon.conf file syntax.........................................................................................64
9.4 Troubleshooting tips..........................................................................................................64
9.5 Reporting problems...........................................................................................................65
10 HP-UX IPFilter utilities...............................................................................67
10.1 The ipf utility...................................................................................................................67
10.1.1 Syntax.....................................................................................................................67
10.1.2 Options..................................................................................................................67
10.1.3 Example..................................................................................................................69
10.2 The ipnat utility...............................................................................................................69
10.2.1 Syntax....................................................................................................................69
10.2.2 Options..................................................................................................................69
10.2.3 Example.................................................................................................................69
10.3 The ipfilter utility (HP-UX 11i v3)........................................................................................69
10.3.1 Syntax....................................................................................................................69
10.3.2 Options..................................................................................................................70
10.3.3 Example.................................................................................................................70
10.4 The ippool utility.............................................................................................................70
10.4.1 Syntax....................................................................................................................70
10.4.2 Global options........................................................................................................70
10.4.3 Command options...................................................................................................70
11 HP-UX IPFilter and ICMP...........................................................................72
11.1 Filtering ICMPv4 packets by type and code: icmp-type and code............................................72
11.2 Configuring ICMPv4 kernel parameters...............................................................................73
11.2.1 Dead gateway detection: ip_ire_gw_probe..................................................................73
11.2.1.1 IPFilter configuration...........................................................................................74
11.2.2 ICMP source quench: ip_send_source_quench..............................................................74
11.2.2.1 IPFilter configuration..........................................................................................74
11.2.3 ICMP redirects: ip_send_redirects...............................................................................74
11.2.3.1 IPFilter configuration..........................................................................................75
11.2.4 PMTU discovery: ip_pmtu_strategy..............................................................................75
6 Contents