RE: list ipfilter

> > Quite often the open source version of ipfilter has needed a recompile
> > after patching
> > the Solaris kernel because the networking guys changed/added something.
> > In the
> > end, I only made sure it compiled on the latest update for any
> > particular release
> > of Solaris.
>
> Sounds like the pkgadd command will need to fire off a preinstall script
> which in turns checks for the existence of a specific kernel patch. If
> that patch is not present then return a failure.
>
> Sounds like a package maintainance nightmare because every package for x86
> and Sparc would need a re-package with every kernel patch release across
> Solaris 8 and 9 and 10.

From what I understand of the whole issue, part of Darren's employment at Sun is to
collaborate on creating public APIs for IPF, which is being done in stages. After the API
finalized, there should be no need for a recompile every time the kernel is patched or
changes, because IPF won't be using private structs any more.

I see no reason why the open source version of IPF couldn't talk to that same API?

__________________________________________________ _______________
With Windows Live Hotmail, you can personalize your inbox with your favorite color.
http://www.windowslive-hotmail.com/l..._addcolor_0607