HP-UX IPFilter V18.0 Release Notes for HP-UX 11i v3

4 Known Issues and Workarounds

• The startup script for HP-UX IPFilter automatically disables the

ip_forward_directed_broadcasts parameter. This keeps the system from being

subjected to broadcast-storm attacks that can bring down a network.

• If rules are configured using stdin, rules numbers are not assigned properly to individual rules.

Sample output displaying the problem:

# ipf -f-

pass in on lan1 from 15.154.118.191/32 to 16.181.168.207/32

pass in on lan1 from 15.154.118.192/32 to 16.181.168.207/32

# ipfstat -iohn

empty list for ipfilter(out)

0 @0:0 pass in on lan1 from 15.154.118.191/32 to 16.181.168.207/32

0 @0:0 pass in on lan1 from 15.154.118.192/32 to 16.181.168.207/32

• l4check rules

l4check adds or deletes rules with only one IP address. RDR rules with only one IP

address are ignored.

◦

◦ l4check does not have the option to add rules with sticky keyword.

• The -B option to ipfstat to display the size of the log buffer does not function as expected.