HP-UX IPFilter Version A.03.05.14 Administrator's Guide

HP-UX IPFilter Utilities
The ipf Utility
Chapter 584
-m
<d|e|q|t>
Disables or enables DCA mode, queries the DCA mode, or toggles DCA
between being enabled or disabled by using the following options:
• d
Disables DCA.
• e
Enables DCA.
• q
Queries whether DCA is disabled or enabled.
• t
Toggles DCA between disabled or enabled.
When there are no keep limit rules and there is no connection
allocation, disable DCA. See “DCA Mode” on page 61 for more
information about how to disable, enable, query, or toggle DCA.
-E
<interface name>
Enables IPFilter processing for traffic on a given interface.
-D
<interface name>
Disables IPFilter processing for traffic on a given interface.
-Q
<interface name>
Verifies that IPFilter processing is enabled or disabled for a given
interface.
The -E, -D, and -Q commands let you control IPFilter processing on a
given interface. For example, ipf -D lan0 disables IPFilter processing
for traffic on lan0 and ipf -E lan0 enables IPFilter processing on lan0.
ipf -Q lan0 is used to verify if IPFilter processing is enabled or
disabled for lan0.
NOTE All ipf actions are performed on the active rules file by default. To
perform actions on the inactive rules file, you must specify the -I option.