Re: ipfilter and Solaris 10

>On Wed, 24 Nov 2004 18:24:32 +0100, casper.dik@sun.com
><casper.dik@sun.com> wrote:
>>
>> It's part of the standard Solaris release; the version number reported
>> is not really proper so it's changed in the next express release to:
>>
>> ipf: IP Filter: v4.0.2 (592)
>>
>> We've made a number of changes to ipfilter such that it is
>> now well-behaved; this gives some divergence and just removing
>> and pkgadding the "standard version" will give you some grief;
>> and also no integration with SMF.
>>
>> As it is part of the OS it will be supported.
>
>Not to be rude, but does "well-behaved" mean that it will work with
>IPsec without causing panics?

Well behaved primarily means that it does not stuff packets
in queues it really shouldn't be accessing and that it inserts
itself properly. (Some of that is punted to a new daemon, pfild)

Casper