HP-UX IPFilter V17.05 Administrator Guide
monitoring IPFilter, 88
multi-level grouping, 39
N
NAT
file configuration, 61
viewing and loading rules, 96
NAT keywords
bimap, 69
map, 64
map-block, 65
portmap, 64
rdr, 66
nat tags, 42
netstat, 92
nslookup, 35
O
on keyword, 30
opt keyword, 32
out keyword, 26
P
package IP address, 120
pass keyword, 26
patch dependencies, 19
performance guidelines, 149
performance monitoring, 152
rule configuration, 150
rule loading, 150
system configuration, 149
traffic, 151
performance improvement, 39
performance information, 78
performance monitoring guidelines, 152
pfil module, 147
ping, 35
port keyword, 27
port number filtering, 27
portmap keyword, 64
prerequisites
installation, 19
patch dependencies, 19
proto keyword, 26
protocol 50 and 51 traffic, 117
protocol-based filtering
IPv6, 44
Q
quick keyword, 29
R
rdr keyword, 66
reloading IPFilter, 90
removing, 21
removing IPFilter software
static linking, 147, 148
reporting problems, 35, 92
return-icmp-as-dest keyword, 38
return-rst keyword, 38
rule configuration guidelines, 150
rule groups, 39
rule loading guidelines, 150
rule tags, 42
rules
active list, 41
adding rules to a rules file, 41, 47
bimap keyword, 69
block keyword, 26
errors occur when loading, 91
file configuration, 25
flags keyword, 31
flushing, 41
from keyword, 26
grouping, 39
icmp-type keyword, 33, 99
in keyword, 26
inactive list, 41
interface-specific, 30
IP address-specific, 26
ipopts keyword, 32
IPv6, 43
keep frags keyword, 36
keep limit keyword, 51
keep state keyword, 33, 34
log keyword, 29, 86
log limit freq keyword, 53
log limit keyword, 52
map keyword, 64
map-block keyword, 65
on keyword, 30
opt keyword, 32
out keyword, 26
outbound traffic, 26
pass keyword, 26
performance improvement with, 39
port keyword, 27
portmap keyword, 64
processing order, 25, 61
proto icmp keep state, 35
proto keyword, 26
quick keyword, 29
rdr keyword, 66
removing, 42
return-icmp-as-dest keyword, 38
return-rst keyword, 38
Serviceguard, 120
swapping active and inactive rules lists, 41
taking effect, 41, 47, 55
to keyword, 26
with frags keyword, 33
with short keyword, 33
S
Serviceguard, 119
Cluster Object Manager, 123
filtering on a package IP address, 120
intra-cluster communication, 121
156 Index