HP-UX IPFilter Version 15.01 Release Notes

• PHNE_25388 (LAN)
• PHNE_23465 (BTLAN)
Recommended Patch for DLKM
If you are using DLKM, HP recommends that you install PHKL_22994 or a patch that supersedes
it.
Recommended Patches for Network Utilities
HP recommends that you install the following patches for network utilities:
• PHCO_35520 (SAM)
• PHNE_30450 (nettl)
Hardware Requirements
HP 9000 workstations and servers and HP Integrity Systems
Other Requirements
None
Disk Space Required for Installation
This product requires 10 Mbytes of disk space.
Common Mistakes or Gotchas
None
Fixes in This Version
HP-UX IPFilter version 15.01 includes fixes for the following change requests:
DescriptionDefect ID
(JAGag23905) Using NAT to redirect (rdr) the destination port number but not the
destination IP address on an end destination system causes TCP to fail when used with
transmit checksum offload (CKO). TCP discards inbound packets because of checksum
errors and connection establishment fails. This problem occurs only when using the
following interface drivers: gelan, igelan, iether, and ixgbe.
8606468623
(JAGag29179) Using NAT to redirect (rdr) the destination port number and/or the
destination IP address on an end destination system causes TCP to fail when used with
CKO-capable network interface cards whether or not CKO is enabled. TCP discards
packets because of checksum errors and connection establishment fails. This problem
occurs only when using the following interface drivers: gelan, igelan, iether, and
ixgbe.
8606474670
(JAGag29580) IPFilter was not recognizing packets with subnet broadcast addresses
properly and was not filtering them. This defect affects HP-UX 11i v2 and HP-UX 11i
v3 versions only.
8606475139
(JAGag36157) If a rule contained an IPv6 address range, IPFilter was not matching all
valid packet addresses within the range. IPFilter was comparing the packet address
with the range addresses in four 32–bit chunks instead of one 128–bit value.
860482257
(JAGag36161) On HP-UX 11i v1 systems without IPv6 installed, the IPFilter startup file
(/sbin/init.d/ipfboot) would log the following message in the /etc/rc.log
file: Driver cannot be found.
8606482261
(JAGag50031) Support for IPv4-in-IPv6 tunnels. IPFilter was not properly filtering IPv4
packets (proto ip) encapsulated in IPv6 packets.
8606482420
Fixes in This Version 7