HP-UX IPFilter Version 15.01 Administrator's Guide

D HP-UX IPFilter Static Linking
This appendix provides instructions for statically linking the HP-UX IPFilter kernel modules to
the kernel.
Overview
IPFilter has two kernel modules, pfil, a streams module and ipf, a WSIO pseudo driver. These
are dynamically loadable kernel modules. When IPFilter is installed on an HP-UX system using
swinstall, these two modules are loaded and configured as dynamically linked modules. They
can be loaded and unloaded when required without shutting down the system as long as the
modules are not currently in use.
Static Linking of HP-UX IPFilter on HP-UX 11i v2 and HP-UX 11i v3
Use the following steps to statically link the IPFilter modules to the kernel with HP-UX 11i v2
and HP-UX 11i v3:
1. Set up the IPFilter modules to be statically linked to the kernel using the kcmodule command.
The modules will be statically linked at the next system boot. See the kcmodule (1M)
manpage for further details. For example:
$ kcmodule -K -h -s pfil=static
$ kcmodule -K -h -s ipf=static
2. Reboot the system.
Use the following steps to return the system back to dynamic linking.
1. Set up the IPFilter modules to be dynamically linked to the kernel using the following
commands:
$ kcmodule -K -h -s pfil=auto
$ kcmodule -K -h -s ipf=auto
2. Reboot the system.
CAUTION: If you need to remove or update IPFilter software, you must reconfigure the ipf
and pfil modules to link dynamically into the kernel. The install and remove scripts for IPFilter
assume the IPFilter modules to be dynamically linked. Do not try installing a newer version or
removing the existing IPFilter product if it is statically linked to the kernel.
Static Linking of HP-UX IPFilter on HP-UX 11i v1
As with any other DLKM modules for HP-UX 11i v1, these modules can be statically linked to
the kernel. Follow these steps to statically link the IPFilter modules to the kernel:
1. Use the kmadmin command to find out if the modules have been loaded dynamically. See
the kmadmin(1M) manpage for usage information. For example:
$ kmadmin -s
TypeStatusIDName
STREAMSLOADED1pfil
WSIOLOADED2ipf
Overview 141