RE: ipfilter on AIX - howto

From a performance point of view, I'm afraid I can't help you (although
one can imagine there is some overhead for the kernel to adapt the
network packages). The LPARS on which I use it don't have a massive
throughput so no major performance penalty is recorded.


Miguel SANDERS
ArcelorMittal Gent

UNIX System Administrator | SAP Infrastructure Group
John Kennedylaan 51, B-9042 Gent

T +32 9 347 3538 | F +32 9 347 4901 | M +32478 805 023
E miguel.sanders@arcelormittal.com
www.arcelormittal.com/gent


-----Oorspronkelijk bericht-----
Van: owner-ipfilter@coombs.anu.edu.au
[mailto:owner-ipfilter@coombs.anu.edu.au] Namens km
Verzonden: maandag 11 februari 2008 21:05
Aan: ipfilter@coombs.anu.edu.au
Onderwerp: Re: ipfilter on AIX - howto

I was mostly wondering about the configuration, do I need to create my
own rc-scripts, does it read /etc/ipf.conf by default or some other
file, etc.

I wont have access to the AIX machine I will be setting this up on for
another week so I just wanted to prepare a little.

The server is going to be a TSM server for external customers on 2 x 1
Gbit and one 10 Gbit interface so we are hopefully going to push alot of
data, especially since almost all customers will have layer 2
connectivity into the network.

Have you noticed any performance penalties against going unfiltered? I
guess that question i kinda moot since youre running LPARs :)


-km

On 11/02, miguel.sanders@arcelormittal.com wrote:
> I'd take a look at the man pages on the net.
> You simply need that fileset, that's all.
>
> If you have any questions, shoot (I have it deployed on AIX 5.3
> partitions)
>
>
> Miguel SANDERS
> ArcelorMittal Gent
>
> UNIX System Administrator | SAP Infrastructure Group John Kennedylaan
> 51, B-9042 Gent
>
> T +32 9 347 3538 | F +32 9 347 4901 | M +32478 805 023 E
> miguel.sanders@arcelormittal.com www.arcelormittal.com/gent
>
>
> -----Oorspronkelijk bericht-----
> Van: owner-ipfilter@coombs.anu.edu.au
> [mailto:owner-ipfilter@coombs.anu.edu.au] Namens km
> Verzonden: maandag 11 februari 2008 18:47
> Aan: ipfilter@coombs.anu.edu.au
> Onderwerp: ipfilter on AIX - howto
>
> Hello,
>
> What is needed to setup ipfilter on AIX after installing it from the
> expansion CD? Devices, rc scripts, etc?
>
> Is there anything documented on this for AIX either by IBM or anyone
> else?
>
>
> -km
>
>
> ****
> This message and any attachment are confidential, intended solely for
the use of the individual or entity to whom it is addressed and may be
protected by professional secrecy or intellectual property rights.
> If you have received it by mistake, or are not the named recipient(s),
please immediately notify the sender and delete the message. You are
hereby notified that any unauthorized use, copying or dissemination of
any or all information contained in this message is prohibited.
> Arcelormittal shall not be liable for the message if altered,
falsified, or in case of error in the recipient.
> This message does not constitute any right or commitment for
ArcelorMittal except when expressly agreed otherwise in writing in a
separate agreement.
> ****
>

****
This message and any attachment are confidential, intended solely for the use of the individual or entity to whom it is addressed and may be protected by professional secrecy or intellectual property rights.
If you have received it by mistake, or are not the named recipient(s), please immediately notify the sender and delete the message. You are hereby notified that any unauthorized use, copying or dissemination of any or all information contained in this message is prohibited.
Arcelormittal shall not be liable for the message if altered, falsified, or in case of error in the recipient.
This message does not constitute any right or commitment for ArcelorMittal except when expressly agreed otherwise in writing in a separate agreement.
****