HP-UX IPFilter Version 16 Administrator's Guide
pass keyword, 21
patch dependencies, 15
performance guidelines, 139
performance monitoring, 142
rule configuration, 140
rule loading, 140
system configuration, 139
traffic, 141
performance improvement, 33
performance information, 70
performance monitoring guidelines, 142
pfil module, 137
ping, 30
port keyword, 22
port number filtering, 22
portmap keyword, 58
prerequisites
installation, 15
patch dependencies, 15
proto keyword, 21
protocol 50 and 51 traffic, 109
protocol-based filtering
IPv6, 38
Q
quick keyword, 24
R
rdr keyword, 60
reloading IPFilter, 81
removing, 17
removing IPFilter software
static linking, 137, 138
reporting problems, 30, 84
return-icmp-as-dest keyword, 32
return-rst keyword, 32
rule configuration guidelines, 140
rule groups, 33
rule loading guidelines, 140
rules
active list, 34
adding rules to a rules file, 34, 41
bimap keyword, 62
block keyword, 21
errors occur when loading, 82
file configuration, 20
flags keyword, 26
flushing, 34
from keyword, 21
grouping, 33
icmp-type keyword, 28, 91
in keyword, 21
inactive list, 34
interface-specific, 25
IP address-specific, 21
ipopts keyword, 27
IPv6, 37
keep frags keyword, 31
keep limit keyword, 45
keep state keyword, 28, 29
log keyword, 24, 78
log limit freq keyword, 47
log limit keyword, 46
map keyword, 58
map-block keyword, 59
on keyword, 25
opt keyword, 27
out keyword, 21
outbound traffic, 21
pass keyword, 21
performance improvement with, 33
port keyword, 22
portmap keyword, 58
processing order, 20, 55
proto icmp keep state, 30
proto keyword, 21
quick keyword, 24
rdr keyword, 60
removing, 34
return-icmp-as-dest keyword, 32
return-rst keyword, 32
Serviceguard, 112
swapping active and inactive rules lists, 34
taking effect, 34, 41, 49
to keyword, 21
with frags keyword, 28
with short keyword, 28
S
Serviceguard, 111
Cluster Object Manager, 115
filtering on a package IP address, 112
intra-cluster communication, 113
mandatory rules, 112
Quorum Server, 114
remote command execution, 114
Serviceguard Manager, 115
services, 112
single-user mode, 17
software, loading, 16
state table
dump, 72
static linking, 137
HP-UX 11i v1, 137
HP-UX 11i v2, 137
HP-UX 11i v3, 137
removing IPFilter software, 137, 138
summary logs for cumulative limits, 47
supported interfaces, 118
swinstall, 16
swlist, 15
system configuration guidelines, 139
system traffic guidelines, 141
T
TCP
configuration example, 128
TCP filtering, 22
146 Index