HP-UX IPFilter V17.05 Administrator Guide

• Control incoming TCP connections through Dynamic Connection Allocation (DCA)
• Support for NAT, which lets an intermediate HP-UX system act as a translator of IP addresses
and network ports
• Send back ICMP error/TCP reset messages for blocked packets
• Keep packet state information for TCP, UDP, and ICMP
• Keep fragment state information for any IPv4 packet and the same rule to all related fragments
• Drop all fragmented traffic if specified by rule
• Create extensive logs when required
1.2 Supported and Unsupported Features
See Appendix A (page 125) for a list of supported and unsupported features, including utilities
and commands distributed with the open source IPFilter product but not supported by HP. This
appendix also lists the network interfaces that are supported and unsupported with HP-UX
IPFilter.
18 Overview