Re: Multi-homed Solaris 10 setup question

This is a discussion on Re: Multi-homed Solaris 10 setup question within the IPFilter forums, part of the System Security and Security Related category; On Sep 3, 2007, at 10:22 PM, Jefferson Ogata wrote: > On 09/03/07 13:47, Thomas Backman ...


Go Back   Usenet Forums > System Security and Security Related > IPFilter

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 09-04-2007
Thomas Backman
 
Posts: n/a
Default Re: Multi-homed Solaris 10 setup question


On Sep 3, 2007, at 10:22 PM, Jefferson Ogata wrote:

> On 09/03/07 13:47, Thomas Backman wrote:
>> Any hints?
>> As you might notice, I have very little idea what I'm doing here, at
>> least the ipfilter related parts, but I'd love if I could get this
>> working - it'd be a waste to not use both connections, and I'd rather
>> not switch back to Linux.

>
> You might try enabling the strong end system model:
>
> http://www.sean.de/Solaris/soltune.h...st_multihoming


Thanks, that seems like a sensible thing to do. Unfortunately, it didn't
solve my problems (but it might have gotten me a bit further).

When I start out experimenting, I have elxl0 NAT:ed and elxl1 down.
I start up elxl1, and the NAT stops working every few HTTP requests -
my guess is that Solaris routes then to the wrong NIC and the response
(if it even gets out on the wire) is lost. However, I can't remove
any of
the (two) default routes, because they are both needed, it seems.
I haven't been able to write an ipf rule to route the NAT:ed packets
without a kernel route, is that even possible? If it is, I have the
syntax
wrong. :)

Regards,
Thomas
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 06:43 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0