HP-UX IPFilter V17.05 Administrator Guide

About This Document
This document describes how to install, configure, and troubleshoot HP-UX IPFilter version
17.05.
The latest version of this document can be found online at http://www.hp.com/go/
hpux-security-docs.
Intended Audience
This document is intended for network managers or network security administrators who install,
configure, and troubleshoot HP-UX IPFilter on HP 9000 systems. Administrators are expected
to have knowledge of HP-UX operating system concepts, commands, and configuration.
Administrators are also expected to have knowledge of TCP/IP networking concepts and network
configuration.
This document is not a tutorial.
New and Changed Information in This Edition
The documentation reflects the following changes to the HP-UX IPFilter product.
Fixes for HP-UX 11i v3
QXCR1001042506 HP-UX IPFilter rules loading returns ENOMEM even when memory is
available.
QXCR1001042389
The ipf command shows slower performance when loading a big rule
file with A.11.31.16 and A.11.31.17.
QXCR1001042502 High memory usage when loading large number of HP-UX IPFilter rules.
QXCR1001030338
ipfstat -r not working in HP-UX IPFilter A.11.xx.17 release.
QXCR1000997271
ipf:fr_tcp_age panics when IPFilter Network Address Translation
(NAT) functionality is used.
QXCR1001004970
Memory leak in ALLOCB_MBLK_XX arena in pfilstrmodwput() while
copyb() is failing.
Typographic Conventions
This document uses the following typographical conventions:
%, $, or #
A percent sign represents the C shell system prompt. A dollar
sign represents the system prompt for the Bourne, Korn, and
POSIX shells. A number sign represents the superuser prompt.
audit(5) A manpage. The manpage name is audit, and it is located in
Section 5.
Command
A command name or qualified command phrase.
Computer output
Text displayed by the computer.
Ctrl+x A key sequence. A sequence such as Ctrl+x indicates that you
must hold down the key labeled Ctrl while you press another
key or mouse button.
ENVIRONMENT VARIABLE The name of an environment variable, for example, PATH.
[ERROR NAME]
The name of an error, usually returned in the errno variable.
Key The name of a keyboard key. Return and Enter both refer to the
same key.
Intended Audience 13