HP-UX IPFilter Version 17 Administrator's Guide

10 HP-UX IPFilter Utilities
This chapter describes utilities for administering IPFilter. It contains the following sections:
• “The ipf Utility” (page 95)
• “The ipnat Utility” (page 98)
• “The ipfilter Utility (HP-UX 11i v3)” (page 99)
• “The ippool Utility” (page 99)
NOTE: Most of the information in this chapter has been derived from the IP Filter-based
Firewalls HOWTO document written by Brendan Conoby and Erik Fichtner. You can find this
document at http://www.obfuscation.org/ipf/.
10.1 The ipf Utility
The ipf utility performs a broad range of actions on the active and inactive IPFilter rulesets.
You can use ipf to add rules, delete rules, switch active and inactive rulesets, and flush the
existing ruleset from the system. You can perform other actions with ipf. See the ipf manpages
for more information.
10.1.1 Syntax
ipf -options [-f rules_file_name]
10.1.2 Options
The following are a few of the common options used with the ipf utility:
-6
Apply the action to the IPv6 filter ruleset or rulesets, or IPv6
processing. To use this option, insert it immediately after the ipf
command and before any other options.
If you do not specify the -6 option, IPFilter applies the option to the
IPv4 ruleset or rulesets, or IPv4 processing.
10.1 The ipf Utility 95