HP-UX IPFilter V18.0 Administrator Guide for HP-UX 11i v3
9 Troubleshooting HP-UX IPFilter....................................................................54
9.1 Viewing IPFilter statistics and active rules with ipfstat...............................................................54
9.1.1 Syntax.......................................................................................................................54
9.1.2 Options....................................................................................................................54
9.1.3 Examples..................................................................................................................55
9.2 Testing rules with ipftest.....................................................................................................58
9.2.1 Syntax......................................................................................................................58
9.2.2 Options...................................................................................................................58
9.2.3 Example...................................................................................................................59
9.3 Logging IPFilter packets......................................................................................................61
9.3.1 Using the log keyword to configure IPFilter logging.........................................................61
9.3.1.1 level log-level......................................................................................................61
9.3.1.2 first...................................................................................................................62
9.3.1.3 body.................................................................................................................62
9.3.2 Using ipmon to view IPFilter log entries.........................................................................62
9.3.2.1 Syntax..............................................................................................................63
9.3.2.2 Options............................................................................................................63
9.3.2.3 Examples..........................................................................................................63
9.3.2.4 ipmon and DCA logging....................................................................................64
9.3.3 Analyzing IPFilter log events........................................................................................64
9.3.3.1 Syntax..............................................................................................................64
9.3.3.2 ipmon.conf file syntax.........................................................................................65
9.4 Troubleshooting tips..........................................................................................................65
9.5 Reporting problems...........................................................................................................66
10 HP-UX IPFilter utilities...............................................................................68
10.1 The ipf utility...................................................................................................................68
10.1.1 Syntax.....................................................................................................................68
10.1.2 Options..................................................................................................................68
10.1.3 Example..................................................................................................................70
10.2 The ipnat utility...............................................................................................................70
10.2.1 Syntax....................................................................................................................70
10.2.2 Options..................................................................................................................70
10.2.3 Example.................................................................................................................70
10.3 The ipfilter utility (HP-UX 11i v3)........................................................................................70
10.3.1 Syntax....................................................................................................................70
10.3.2 Options..................................................................................................................71
10.3.3 Example.................................................................................................................71
10.4 The ippool utility.............................................................................................................71
10.4.1 Syntax....................................................................................................................71
10.4.2 Global options........................................................................................................71
10.4.3 Command options...................................................................................................71
11 HP-UX IPFilter and ICMP...........................................................................73
11.1 Filtering ICMPv4 packets by type and code: icmp-type and code............................................73
11.2 Configuring ICMPv4 kernel parameters...............................................................................74
11.2.1 Dead gateway detection: ip_ire_gw_probe..................................................................74
11.2.1.1 IPFilter configuration...........................................................................................75
11.2.2 ICMP source quench: ip_send_source_quench..............................................................75
11.2.2.1 IPFilter configuration..........................................................................................75
11.2.3 ICMP redirects: ip_send_redirects...............................................................................75
11.2.3.1 IPFilter configuration..........................................................................................76
11.2.4 PMTU discovery: ip_pmtu_strategy..............................................................................76
6 Contents