Re: Solaris 10+ipfilter how-to (revised)

> Darren's pfil won't run
> without pfild in place, and removing packages SUNWipfu and SUNWipfr
> removes pfild. So, you have to hang on to it.

If you properly replace pfil, you do not need pfild.

Or should not.

BUT, the pfil SMF service may need pfild running.

> Darren, what is pfild and how come the public-domain version doesn't
> come with it?

pfild is there because the pfil kernel module cannot access data in the
same manner as the open source code can. This is due to restrictions on
what APIs within IP you are allowed to officially use within Solaris
products. Open source software can just use whatever the hell it wants
in order to function :)

Darren