HP-UX IPFilter Version 15.01 Administrator's Guide

static linking, 141
kctune, 139
keep frags keyword, 35
keep limit
keyword, 49
keep limit rules
adding, 54
adding a subnet or IP address range rule, 54
adding individual rule, 54
changing current rule, 53
extracting, 55
integrating, 55
rule hits, 57
updating, 53
updating a subnet or IP address range, 54
keep state
ICMP, 34
keyword, 32, 33
state table dump, 76
when to use, 33
keeping state
UDP, 34
with servers and flags, 33
kernel tunables
configuring, 139
fr_statemax, 138
fr_tcpidletimeout, 137
ipl_buffer_sz, 138
ipl_logall, 139
ipl_suppress, 139
keywords
bimap, 66
block, 25
flags, 30
from, 25
group, 37
icmp-type, 32, 95
in, 25
ipopts, 31
keep frags, 35
keep limit, 49
keep state, 32
log, 28, 82
log limit, 50
log limit freq, 51
map, 62
map-block, 63
on, 29
opt, 31
out, 25
pass, 25
port, 26
portmap, 62
proto, 25
quick, 28
rdr, 64
return-icmp-as-dest, 36
return-rst, 36
to, 25
with frags, 32
with short, 32
kmadmin
static linking, 141
kmadmin -s, 21
kmsystem
static linking, 142
kmtune, 140
kmupdate
static linking, 142
L
limiting connections
by IP address, 49
by subnet, 50
cumulative, 50
default individual limit, 50
loading software, 20
localhost filtering, 71
log keyword, 28, 82
body option, 83
first option, 82
log limit freq keyword, 51
log limit keyword, 50
logging, 86
packets, 28
problems, 86
logging exceeded connections, 50
logging techniques, 82
M
map keyword, 62
map-block keyword, 63
memory allocation, 138
modifying DCA rules, 53
monitoring IPFilter, 84
multi-level grouping, 37
N
NAT
file configuration, 59
viewing and loading rules, 92
NAT keywords
bimap, 66
map, 62
map-block, 63
portmap, 62
rdr, 64
netstat, 88
nslookup, 34
O
on keyword, 29
opt keyword, 31
out keyword, 25
P
package IP address, 116
pass keyword, 25
149