Re: upgrading ipfilter or pfil on Solaris 10?

> >> Gang,
> >>
> >> While I'm the author of the how-to on replacing Sun's ipfilter
> >> with the public domain version at:
> >>
> >> http://www.colby.edu/personal/j/jaea...filter.upgrade
> >>
> >> I have never upgraded ipfilter or pfil from one version to another
> >> on any of my Solaris 10 boxes. I need to do so. Anybody have
> >> any advice, warnings, or gotchas on this topic? Or is this new
> >> territory that needs to be documented?
> >
> >pkgrm ipfx
> >pkgrm ipf
> >pkgrm pfil
> >reboot
> >pkgadd pfil
> >pkgadd ipf
> >pkgadd ipfx
> >
> >You asked in another email whether or not the reboot is avoidable.
> >Yes, it is, but avoiding it means unplumb'ing all of your interfaces.
>
>
> It's not possible to do a ifconfig modremove/modinsert of pfil?

That'll only remove the use of pfil over STREAMS devices for IPv4/IPv6.
You can't do a "modremove" for the instance of pfil push'd over the NIC
for ARP, etc - the catch with using the "autopush" approach.

Darren