The way AIX Filtering module stores port numbers (using a short integer, which is limited to the value 32767 and below), makes it possible to bypass the filtering rules when a remote computer tries to access port numbers higher than 32767.
Trying to create the following rules shows this problem: genfilt -v 4 -a D -s 0.0.0.0 -m 0.0.0.0 -d 0.0.0.0 -M 0.0.0.0 \ -c udp -o any -O eq -P 123 -l n -w I -i all
Works fine, but: genfilt -v 4 -a D -s 0.0.0.0 -m 0.0.0.0 -d 0.0.0.0 -M 0.0.0.0 -c udp \ -o any -O eq -P 32768 -l n -w I -i all
Fails with Bad destination port/ICMP type "32768".
