Re: Getting ipfilter to work on Solaris 10

> Am I right to assume that the lack of further replies indicates that my
> configuration is not the cause of my problem? If so may it be possible
> that the observed behavior is due to a bug in the Solaris 10
> implementation of ipfilter (or pfil)? How could I find out?

If you had a support arrangement with Sun, I'd say file a bug report
so it gets looked at, is recognised and will stay open until you have
your problem solved, whether it be through education of code (longer.)

My recollection is that when we adopted the path we did for Solais10,
we did so knowing that the pfil module would NOT support modinsert so
if an interface's driver can't be used with autopush, it would not be
able to be filtered.

But I don't know if you can if you've just downloaded it and installed it.

There is another possible solution and it goes something like this.

You need to download pfil & ipf from the web site, unpack and compile
pfil, followed by ipfilter.

You then manually update all of the binaries on your system with those
created through the compilation steps. Be sure to NOT overwrite the
/usr/sbin/ipf file but only /usr/sbin/sparcv9/ipf, etc.

Darren