HP-UX IPFilter v18.21 Administrator Guide HP-UX 11i v3 (761995-001, March 2014)

Index
A
active rules list, 29
adding keep limit rules, 41
address pooling, 55
B
bidirectional filtering
in keyword, 17
out keyword, 17
bidirectional filtering with IPSec, 91
bimap keyword, 50
block keyword, 17
blocked traffic
IPSec
correcting, 91
C
checklist
installation and configuration, 13
commands
unsupported, 103
configuration
checklist, 13
DCA rules file, 34
IPv6 rules file, 31
NAT rules file, 44
rules file, 16
rules processing, 16, 44
verifying, 14
configuration examples, 106
configuring
file conventions, 16, 28, 31, 33, 44
configuring kernel tunables, 119
configuring variables, 120
D
DCA
file configuration, 34
keywords, 35
logging command, 70
overview, 34
processing commands, 75
remote failover, 98
rule modifications, 39
setting mode, 41, 75
syntax, 35
DCA keywords
keep limit, 35
DCA_START configuration option, 42
debugging
ipfstat utility, 61
Denial of Service attack defense, 17
disabling, 76
Dynamic Connection Allocation see DCA
dynamic linking, 122
E
enabling, 76
examples
configuration
basic, 106, 107
TCP, 113
extension headers
IPv6, 32
extracting keep limit rules, 41
F
filtering
bidirectional, 17
by interface, 20
by IP address, 17
by subnet, 17
by TCP header flags, 21
ICMP packets, 22, 78
IP address and interface, 17
IPv6, 31
localhost, 59
on IP options, 21
package IP address, 94
port number, 18
rate-based, 18
filtering on flags
confusing with keeping state, 23
firewall
basic configuration, 16
flags keyword, 21
fr_statemax, 118
fr_tcpidletimeout, 117
fragmentation
IPv6, 33
from keyword, 17
FTP
active FTP
client, 85
server, 84
how it works, 84
passive FTP
client, 86
server, 84
WU-FTPD, 84
G
group keyword, 27
H
high availability, 93
I
ICMP
error status messages, 25
filtering on, 22, 78
128 Index