HP-UX IPFilter Version 15.01 Administrator's Guide

11. Click OK on the Note window to reboot the system.
The user interface disappears and the system reboots.
12. After the system reboots, check the log files in /var/adm/sw/swinstall.log
and /var/adm/sw/swagent.log to verify that the installation was successful.
13. On HP-UX 11i v3 systems, enable HP-UX IPFilter using the following command:
/opt/ipf/bin/ipfilter -e
CAUTION: Disabling or enabling IPFilter using /opt/ipf/bin/ipfilter briefly brings
down all network interface cards and the system will lose network connectivity for a short
period. Unless there is heavy network traffic, this interruption has no or little overall effect
on existing connections.
HP recommends that you do not enable or disable HP-UX IPFilter when critical network
applications are running. If you have applications that may interpret a network interruption
as a network card failure, such as Serviceguard, HP recommends that you schedule enabling
or disabling IPFilter when interrupting network connectivity is not disruptive.
NOTE: Do not run the HP-UX IPFilter product when the system is booted in single-user mode.
Step 3: Verifying the Installation
Use the following commands to verify the HP-UX IPFilter installation.
• Verify that HP-UX IPFilter is running using the -V option of the ipf command:
ipf -V
ipf: HP IP Filter: v3.5alpha5 (A.11.31.15) (312)
Kernel: HP IP Filter: v3.5alpha5 (A.11.31.15)
Running: yes
Log Flags: 0 = none set
Default: pass all, Logging: available
Active list: 1
• Verify that HP-UX IPFilter has been correctly loaded.
On HP-UX 11i v2 and HP-UX 11i v3, enter the following commands:
# kcmodule -v -q pfil
# kcmodule -v -q ipf
Verify that the state is loaded.
On HP-UX 11i v1, enter the kmadmin -s command. Search for the pfil and ipf modules
and verify that the status is LOADED.
Step 4: (Optional) Modifying Kernel Tunable Parameters
HP-UX IPFilter supports kernel tunable parameters that affect IPFilter logging behavior and the
IPFilter state table. For information about modifying them, see Appendix C (page 137).
In addition, Chapter 10 (page 95) describes system kernel tunable parameters that control ICMP
features and how to configure them to optimize security.
Step 3: Verifying the Installation 21