ipfs

Save and restore information for NAT and state tables

Syntax:

ipfs [-nv] -l

ipfs [-nv] -u

ipfs [-nv] [-d dirname] -R

ipfs [-nv] [-d dirname] -W

ipfs [-nNSv] [-f filename] -r

ipfs [-nNSv] [-f filename] -w

ipfs [-nNSv] -f filename -i if1, if2

Runs on:

Neutrino

Options:

-d
Change the default directory used with -R and -W options for saving state information.
-f filename
The name of the file to read from or write to.
-i ifname1 ifname2
Change all instances of the interface name, ifname1, in the state save file to ifname2. This option is useful if you're restoring state information after a hardware reconfiguration or change.
-l
("el") Lock the state tables in the TCP/IP stack.
-N
Operate on NAT information.
-n
Don't take any action that would affect information stored in the TCP/IP stack or on disk.
-R
Restore all saved state information, if any, from ipstate.ipf and ipnat.ipf, stored in the /var/db/ipf directory unless otherwise specified with the -d option. The state tables are locked at the beginning of this operation and are unlocked once it's complete.
-r
Read information from the specified file and load it into the TCP/IP stack. You must have already locked the state tables; they aren't unlocked when the operation is complete.
-S
Operate on filtering state information.
-u
Unlock the state tables in the TCP/IP stack.
-v
Be verbose.
-W
Save in-TCP/IP stack state information, if any, in ipstate.ipf and ipnat.ipf, stored in the /var/db/ipf directory unless otherwise specified with the -d option. The state tables are locked at the beginning of this operation and are unlocked once it's complete.
-w
Write the information from the TCP/IP stack into the specified file. You must have already locked the state tables; they aren't unlocked when the operation is complete.

Description:

The ipfs utility saves state information created for NAT entries. If the system reboots, and then restores this information, existing connections aren't interrupted.

Files:


Note: Create the /var/db/ipf/ directory first.

See also:

ipf, ipfstat, ipmon, ipnat, lsm-ipfilter-*.so

"Setting up a firewall" in the Securing Your System chapter of the Neutrino User's Guide