Re: ipfilter and Solaris 10

In some email I received from Jeff A. Earickson, sie wrote:
> Darren et al,
>
> I cold installed Solaris 10 beta 69 on a test box, taking the defaults
> for most everything. In looking at the syslog messages, lo and behold
> I find:
>
> Nov 24 10:58:10 testbed ipf: [ID 774698 kern.info] IP Filter: v4.0beta18,
> running
>
> and:
>
> # modinfo | grep ipf
> 193 7bea6000 23600 228 1 ipf (IP Filter: v4.0beta18)
> # modinfo | grep pfil
> 194 7ba23908 32e0 - 1 pfil (pfil Streams module 1.61)
> 194 7ba23908 32e0 229 1 pfil (pfil Streams driver 1.61)
>
> Whoa! Will ipfilter be part of the standard Solaris 10 release?

Yes.

> What version?

> Should I pkgrm the ipfilter and pfil versions there
> and go to pfil 2.1 and ipfilter 4.1.3?

Depends. If you're playing with IPFilter at home (or using it there),
do as you wish and we'll see what fun and adventures come of that.

However, that's not a model I'd want to role out into production or
use where support from Sun was desired.

> Will Sun support ipfilter via patches?

Yes.

> What's happening?

Last year I spent 6 months working with Sun to get it integrated.
A lot has happened since then, both at Sun and with me & IPFilter.
Where things are at today with IPFilter in Solaris is not something
anyone wants to see linger for very much longer.

In the mean time, there's been a lot of communication between Sun
and myself about bugs and resolving them, so whatever version
label you see, in Solaris10 when it ships, is not going to be an
entirely accurate key for determining buginess, etc, in comparison
to the open source IPFilter.

I hope that answers some of the more relevant questions you might
have on this topic.

Darren