Solaris 10 and ipfilter

#1 (**permalink**) 07-22-2005

This is a multi-part message in MIME format.

------_=_NextPart_001_01C58EEE.0FE30A55
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hello all you smart people:

I have A Solaris10 Host that has three interfaces. Eri0, ce0 &
ce1. It is running two zones 1 is for dns and one is for mail The system
is setup as follows.

Eri0 is configured for the global zone only.

Ce0 is configured for the dns zone &
Ce1 is configured for the mail zone.

The global zone on boot up will plumb the ce0 and ce1 interface
but will not configure them. The zones will configure the interface. So
what I get=20
Is ce0:
flags=3D201000842<BROADCAST,RUNNING,MULTICAST,IPv4 ,CoS>
mtu 1500 index 3
inet 0.0.0.0 netmask 0
and ce0:1
=
flags=3D201000843<UP,BROADCAST,RUNNING,MULTICAST,I Pv4,CoS>
mtu 1500 index 3
zone ECOMdns0
inet xxx.xxx.xxx.xxx netmask fffffff0 broadcast xxx.xxx.xxx.xxx

This configuration provides security to the global zone by not
allowing access from local zone interfaces.

Problem is that configuring ipfilter on the global zone (since
only the global controls the interface) It will not filter the local
zones interfaces

Thanks in advance

------_=_NextPart_001_01C58EEE.0FE30A55
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
6.5.7226.0">
<TITLE>Solaris 10 and ipfilter</TITLE>
</HEAD>
<BODY>


Hello =
all you smart people:

        I have A Solaris10 Host that has three interfaces. Eri0, =
ce0 & ce1. It is running two zones 1 is for dns and one is for =
mail =
The system is setup as =
follows.

        Eri0 is configured for the global zone =
only.

        Ce0 is configured for the dns zone =
&

        Ce1 is configured for the mail zone.

        The global zone on boot up will plumb the ce0 and ce1 =
interface but will not configure them. The zones will configure the =
interface. So what I get 

        Is ce0:

     &nbsp ;   &nbs=
p;      flags=3D201000842<BROADCAST,RUNN ING,MULTICAST,IPv4,CoS&=
gt; mtu 1500 index 3

        &nbsp ;   &nbs=
p;   inet 0.0.0.0 netmask =
0

        and ce0:1

     &nbsp ;   &nbs=
p;      flags=3D201000843<UP,BROADCAST,R UNNING,MULTICAST,IPv4,C=
oS> mtu 1500 index 3

     &nbsp ;  zone =
ECOMdns0

     &nbsp ;  =
inet =
xxx.xxx.xxx.xxx netmask fffffff0 broadcast xxx.xxx.xxx.xxx

        This configuration provides security to the global zone =
by not allowing access from local zone =
interfaces.

        Problem is that configuring ipfilter on the global zone =
(since only the global controls the interface) It will not filter the =
local zones interfaces

Thanks in advance

</BODY>
</HTML>
------_=_NextPart_001_01C58EEE.0FE30A55--

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode