HP-UX IPFilter v18.21 Administrator Guide HP-UX 11i v3 (761995-001, March 2014)

Options............................................................................................................................60
Examples..........................................................................................................................61
Testing rules with ipftest...........................................................................................................64
Syntax..............................................................................................................................64
Options............................................................................................................................64
Example...........................................................................................................................65
Logging IPFilter packets...........................................................................................................67
Using the log keyword to configure IPFilter logging.................................................................67
level log-level................................................................................................................67
first..............................................................................................................................68
body...........................................................................................................................68
Using ipmon to view IPFilter log entries.................................................................................68
Syntax.........................................................................................................................68
Options.......................................................................................................................68
Examples.....................................................................................................................69
ipmon and DCA logging................................................................................................70
Analyzing IPFilter log events................................................................................................70
Syntax.........................................................................................................................70
ipmon.conf file syntax....................................................................................................70
Troubleshooting tips................................................................................................................71
Reporting problems.................................................................................................................72
10 HP-UX IPFilter utilities...............................................................................74
The ipf utility..........................................................................................................................74
Syntax..............................................................................................................................74
Options............................................................................................................................74
Example...........................................................................................................................75
The ipnat utility.......................................................................................................................75
Syntax..............................................................................................................................75
Options............................................................................................................................75
Example...........................................................................................................................76
The ipfilter utility (HP-UX 11i v3)................................................................................................76
Syntax..............................................................................................................................76
Options............................................................................................................................76
Example...........................................................................................................................76
The ippool utility.....................................................................................................................77
Syntax..............................................................................................................................77
Global options..................................................................................................................77
Command options.............................................................................................................77
11 HP-UX IPFilter and ICMP...........................................................................78
Filtering ICMPv4 packets by type and code: icmp-type and code..................................................78
Configuring ICMPv4 kernel parameters.....................................................................................79
Dead gateway detection: ip_ire_gw_probe...........................................................................79
IPFilter configuration......................................................................................................80
ICMP source quench: ip_send_source_quench.......................................................................80
IPFilter configuration......................................................................................................80
ICMP redirects: ip_send_redirects.........................................................................................80
IPFilter configuration......................................................................................................81
PMTU discovery: ip_pmtu_strategy.......................................................................................81
IPFilter configuration......................................................................................................81
ICMP echo request broadcasts: ip_respond_to_echo_broadcast...............................................81
Using ndd to configure ICMPv4 kernel parameters.................................................................82
Filtering ICMPv6 packets by type and code: icmpv6–type and code..............................................82
Controlling ICMPv6 router discovery and neighbor discovery messages.........................................83
Configuring ipf_icmp6_passthru...........................................................................................83
6 Contents