HP-UX IPFilter Version 17 Release Notes
Table of Contents
1 About this Product..........................................................................................................7
1.1 Benefits and Features........................................................................................................................7
2 New Features in this Release........................................................................................9
2.1 Rate-Based Filtering..........................................................................................................................9
2.2 Address Pooling................................................................................................................................9
2.2.1 The ippool Utility......................................................................................................................9
2.2.2 The ippool.conf File...................................................................................................................9
2.3 State Aging........................................................................................................................................9
2.4 Rule Tags.........................................................................................................................................10
2.4.1 Log Tags...................................................................................................................................10
2.4.2 NAT Tags.................................................................................................................................10
2.5 Sticky NAT Sessions........................................................................................................................10
2.6 Checking Connection Health with l4check..................................................................................10
2.7 Analyzing IPFilter Log Events........................................................................................................10
2.8 Rule Groups.....................................................................................................................................11
3 Fixes in this Release.....................................................................................................13
3.1 Fixes for HP-UX 11i v3....................................................................................................................13
3.1.1 QXCR1000923645—Provide tunable to enable/disable NAT functionality.............................13
3.1.2 QXCR1000923671—Enhancement to list interfaces not covered............................................13
3.1.3 QXCR1000888008—The ipfstat -io and ipfilter -q commands return the wrong
status................................................................................................................................................13
3.1.4 QXCR1000866813—The ipfilter(8) command removes secondary and further IP
addresses by -d option....................................................................................................................13
3.1.5 QXCR1000926632—The pfilboot script does not unplumb interface when interface is
down................................................................................................................................................13
3.1.6 QXCR1000926637—The ipfstat -Q command causes panic when pfil module is not
bound to any interface.....................................................................................................................13
3.1.7 QXCR1000926726—Multicast packets more than 84 bytes are corrupted in IPFilter and
dropped in IP module......................................................................................................................13
3.1.8 QXCR1000950055—The ipmon utility does not format IP addresses and protocol
correctly............................................................................................................................................13
3.1.9 QXCR1000971666—ipfboot stop forces ip_forward_directed_broadcasts back
to 1 ...................................................................................................................................................14
3.2 Fixes for HP-UX 11i v2....................................................................................................................14
3.2.1 QXCR1000923645—Provide tunable to enable/disable NAT functionality.............................14
3.2.2 QXCR1000926726—Multicast packets more than 84 bytes are corrupted in IPFilter and
dropped in IP module......................................................................................................................14
3.2.3 QXCR1000950055—The ipmon utility does not format IP addresses and protocol
correctly............................................................................................................................................14
3.2.4 QXCR1000971666—ipfboot stop forces ip_forward_directed_broadcasts back
to 1 ...................................................................................................................................................14
4 Compatibility Information and Installation Requirements........................................17
4.1 Software Requirements...................................................................................................................17
4.2 Hardware Requirements.................................................................................................................17
4.3 OS Platform and Version Compatibility.........................................................................................17
Table of Contents 3