HP-UX IPFilter Version A.03.05.14 Administrator's Guide

195
debugging blocked traffic with
, 133
gateway, 136
UDP negotiation, 131
IPSec and IPFilter, 129
IPv6
command and configuration examples
, 111
configuration, 105
extension headers, 109
features, 108
filter rules, 106
fragmentation, 111
ICMPv6 filtering, 109
installation, 105
installation dependencies, 111
ipf, 107
ipfstat, 108
logging, 108
protocol-based filtering, 106
rules configuration, 105
stateful filtering, 106
stateful ICMPv6, 108
tunneled packets, 110
unsupported features, 111
K
kadmin
static linking
, 178
kadmin -s, 13
kcmodule
static linking, 180
keep frags keyword, 36
keep limit
keyword
, 47
keep limit rules
adding
, 57
adding a subnet or IP address range rule, 58
adding individual rule, 57
changing current rule, 56
extracting, 58
integrating, 58
rule hits, 54
updating, 56
updating a subnet or IP address range, 57
keep state
ICMP, 69
keyword, 34, 66
state table dump, 88
when to use, 66
keeping state
UDP
, 68
with servers and flags, 66
keywords
bimap
, 40
block, 26
dup-to, 38
flags, 35
from, 28
icmp-type, 31
in, 26
ipopts, 30
keep frags, 36
keep limit, 47
keep state, 34
log, 29, 70
log limit, 49
log limit freq, 51
map, 39
map-block, 41
on, 27
opt, 30
out, 26
pass, 26
port, 33
portmap, 39
proto, 30
quick, 27
rdr, 40
return-icmp, 37
return-rst, 37
to, 28, 75
with frags, 36
with short, 36
kmsystem
static linking, 178
kmtune, 60
kmupdate
static linking
, 179
L
limiting connections
by IP address
, 47
by subnet, 47, 48
cumulative, 48
default individual limit, 49
loading software, 5
localhost filtering, 74
log keyword, 29, 70
body option, 71