HP-UX IPFilter Version 17 Release Notes

3 Fixes in this Release
3.1 Fixes for HP-UX 11i v3
3.1.1 QXCR1000923645—Provide tunable to enable/disable NAT functionality.
The new ipnat_enable tunable is provided to enable/disable NAT functionality. By default,
this tunable is set to 1. If you do not use NAT functionality, disabling this tunable will improve
performance.
3.1.2 QXCR1000923671—Enhancement to list interfaces not covered.
The -l option to ipfilter is provided. This option lists the interfaces and shows which are
protected or unprotected by IPFilter.
3.1.3 QXCR1000888008—The ipfstat -io and ipfilter -q commands
return the wrong status.
The ipfstat -io and ipfilter -q commands could show IPFilter status as up and running
when it is not plumbed into the stack. Two new messages have been added:
• IPFilter enabled but not filtering.
• IPFilter enabled and filtering traffic.
3.1.4 QXCR1000866813—The ipfilter(8) command removes secondary and
further IP addresses by -d option.
When the ipfilter interactive mode -i option is used with -e or -d, a warning is issued.
3.1.5 QXCR1000926632—The pfilboot script does not unplumb interface when
interface is down.
This occurs when IPFilter is disabled and does not recognize a down interface that has the pfil
module loaded. In this case, the pfilboot script does not unplumb all interfaces and unload
the pfil module.
3.1.6 QXCR1000926637—The ipfstat -Q command causes panic when pfil
module is not bound to any interface.
The pfil module is a stream module. When it is not plumbed to any interface and the ipfstat
-Qv command is run, the system panics.
3.1.7 QXCR1000926726—Multicast packets more than 84 bytes are corrupted in
IPFilter and dropped in IP module.
Multicast packets more than 84 bytes are now received properly when IPFilter is enabled.
3.1.8 QXCR1000950055—The ipmon utility does not format IP addresses and
protocol correctly.
The IP addresses are formatted as IPv6 addresses when they are IPv4 addresses. Protocol is
displayed as 159 instead of TCP, but can be any other value.
3.1 Fixes for HP-UX 11i v3 13