The -f primary option is used to display and manage IP filter rules that are used in the TCP/IP stack. The current IP security filter rules can originate from static configuration in the TCPIP profile (referred to here as PROFILE) or indirectly from a variety of filter and tunnel specifications, which are managed through the Policy Agent (referred to here as POLICY). A display of the current filters includes both IP security filter rules and defensive filter rules, if any exist. The defensive filter (-F) primary option provides management and further display of defensive filters.
See The z/OS UNIX ipsec command IP filter (-f) option for parameter descriptions.