HP-UX IPFilter Version 15.01 Administrator's Guide

Index
A
active rules list, 38
adding keep limit rules, 54
B
bidirectional filtering
in keyword, 25
out keyword, 25
bidirectional filtering with IPSec, 112
bimap keyword, 66
block keyword, 25
blocked traffic
IPSec
correcting, 112
C
checklist
installation and configuration, 19
commands
unsupported, 122
configuration
checklist, 19
DCA rules file, 48
IPv6 rules file, 41
NAT rules file, 59
rules file, 24
rules processing, 24, 59
verifying, 21
configuration examples, 125
configuring
file conventions, 24, 38, 41, 45, 59
configuring kernel tunables, 139
configuring variables, 140
D
DCA
file configuration, 48
keywords, 49
logging command, 85
overview, 48
processing commands, 91
remote failover, 119
rule modifications, 53
setting mode, 56, 90
syntax, 49
DCA keywords
keep limit, 49
log limit, 50
log limit freq, 51
DCA_START configuration option, 56
debugging
ipfstat utility, 75
Denial of Service attack defense, 25
disabling, 93
Dynamic Connection Allocation (see DCA)
dynamic linking, 141
E
enabling, 93
examples
configuration
basic, 125, 126
TCP, 132
extension headers
IPv6, 42
extracting keep limit rules, 55
F
filtering
bidirectional, 25
by interface, 29
by IP address, 25
by subnet, 25
by TCP header flags, 30
ICMP packets, 32, 95
IP address and interface, 25
IPv6, 42
localhost, 71
on IP options, 31
package IP address, 116
port number, 26
filtering on flags
confusing with keeping state, 33
firewall
basic configuration, 23
flags keyword, 30
fr_statemax, 138
fr_tcpidletimeout, 137
fragmentation
IPv6, 43
from keyword, 25
FTP
active FTP
client, 104
server, 104
how it works, 103
passive FTP
client, 105
server, 104
WU-FTPD, 103
G
group keyword, 37
H
high availability, 115
I
ICMP
error status messages, 34
filtering on, 32, 95
147