6881 SMF ipfilter tries to unload module in zones
6882 SMF ipfilter lacks a property for a IPv6 custom policy file
6884 SMF ipfilter tuple_get_port needs to remove backslashes
Reviewed by

6881 SMF ipfilter tries to unload module in zones
6882 SMF ipfilter lacks a property for a IPv6 custom policy file
6884 SMF ipfilter tuple_get_port needs to remove backslashes
Reviewed by: Cody Mello <melloc@joyent.com>
Approved by: Robert Mustacchi <rm@joyent.com>

show more ...

6123 SMF ipfilter support needs improvement
Reviewed by: Toomas Soome <tsoome@me.com>
Reviewed by: Attila F&#252;l&#246;p <attila@fueloep.org>
Reviewed by: Cody Mello <melloc@joyent.com>
Approv

6123 SMF ipfilter support needs improvement
Reviewed by: Toomas Soome <tsoome@me.com>
Reviewed by: Attila F&#252;l&#246;p <attila@fueloep.org>
Reviewed by: Cody Mello <melloc@joyent.com>
Approved by: Dan McDonald <danmcd@omniti.com>

show more ...

6761070 PSARC 2008/580 Solaris host-based firewall
6236609 svc.startd resets auxiliary state on svcadm mark maintenance
6762307 SMF - expressing a service's maintenance state by request of an

6761070 PSARC 2008/580 Solaris host-based firewall
6236609 svc.startd resets auxiliary state on svcadm mark maintenance
6762307 SMF - expressing a service's maintenance state by request of another service

show more ...

5008943 /etc/init.d/ipfboot pause/resume functionality broken
5010756 "\" in configuration file does not work correctly
6181489 ipfilter sends out confusing messages.
6449288 Makefiles in

5008943 /etc/init.d/ipfboot pause/resume functionality broken
5010756 "\" in configuration file does not work correctly
6181489 ipfilter sends out confusing messages.
6449288 Makefiles in usr/src/cmd/ipf are missing CDDL
6449291 package prototype files in usr/src/pkgdefs/SUNWipfh missing CDDL
6508325 stale pfil-related rules in Makefile.rules
6661948 ipmon.pid file can be rendered invisible
6714319 IPFilter causes failure of IPv6 compliance tests.
6766614 fin_state costs more than it is worth
6767239 fin_nat causes more trouble than it is worth
6788299 Array overrun in ipfilter
6789766 ipfs usage output is misleading
6792026 ipnat panics in Divide zero exception

show more ...

PSARC 2006/366 IP Instances
6289221 RFE: Need virtualized ip-stack for each local zone
6512601 panic in ipsec_in_tag - allocation failure
6514637 error message from dhcpagent: add_pkt_opt

PSARC 2006/366 IP Instances
6289221 RFE: Need virtualized ip-stack for each local zone
6512601 panic in ipsec_in_tag - allocation failure
6514637 error message from dhcpagent: add_pkt_opt: option type 60 is missing required value
6364643 RFE: allow persistent setting of interface flags per zone
6307539 RFE: Invalid network address causes zone boot failure
5041214 Allow IPMP configuration with zones
5005887 RFE: zoneadmd should support plumbing an interface via DHCP
4991139 RFE: zones should provide a mechanism to configure a defaultrouter for a zone
6218378 zoneadmd doesn't set the netmask for non-loopback addresses hosted on lo0
4963280 zones: need to virtualize the IPv6 default address selection mechanism
4963285 zones: need support of stateless address autoconfiguration for IPv6
5048068 zones don't boot if one of its interfaces has failed
5057154 RFE: ability to change interface status from within a zone
4963287 zones should support the plumbing of the first (and only) logical interface
4978517 TCP privileged port space should be partitioned per zone
5023347 zones don't work well with network routes other than default
4963372 investigate whether global zone can act as a router for local zones
6378364 RFE: Allow each zone to have its own virtual IPFilter

show more ...

6489821 Functions ip_nexthop and ip_nexthop_route should be removed
6489978 Local IPv6 connections with IPv6 extensions headers fail
6490546 Panic when creating a 6to4 tunnel
6492882 wron

6489821 Functions ip_nexthop and ip_nexthop_route should be removed
6489978 Local IPv6 connections with IPv6 extensions headers fail
6490546 Panic when creating a 6to4 tunnel
6492882 wrong error text in /lib/svc/method/ipfilter for IPv6
6493833 assert failed due to unloading ipf with populated state table

show more ...

6343157 svcadm disable ipfilter does not flush the rules
6484763 PFHOOKS breaks post-ACQUIRE ESP processing
6485599 msgpullup/pullupmsg now implies either M_DATA or M_MULTIDATA
6485731 pa

6343157 svcadm disable ipfilter does not flush the rules
6484763 PFHOOKS breaks post-ACQUIRE ESP processing
6485599 msgpullup/pullupmsg now implies either M_DATA or M_MULTIDATA
6485731 panic in fil.c trying to release ipf_mutex while not held
6485761 ipfilter kernel module always enables itself on load
6485781 mutex_enter: bad mutex in ipflog_read
6485943 MSG_FWCOOKED_* survived attempted genocide
6486513 too much of a good thing can be bad
6486575 use ipf -D twice will panic the system
6487360 physical_in hook inserted twice into ip_input() for onnv putback

show more ...

PSARC/2005/334 Packet Filtering Hooks
PSARC/2006/321 ARP packet filtering Hooks
6401219 use of pullupmsg() considered destructive - clears h/w checksum flags
6418698 PSARC/2005/334 - Pack

PSARC/2005/334 Packet Filtering Hooks
PSARC/2006/321 ARP packet filtering Hooks
6401219 use of pullupmsg() considered destructive - clears h/w checksum flags
6418698 PSARC/2005/334 - Packet Filtering Hooks API
6449290 package prototype files in usr/src/pkgdefs/SUNWipfr missing CDDL
6449292 package prototype files in usr/src/pkgdefs/SUNWipfu missing CDDL
6449296 Makefiles for ipf kernel module building missing CDDL
6473996 "fastroute" + "nat" packets cause memory leaks in ipfilter

--HG--
rename : usr/src/cmd/ipf/etc/pfil.ap.sh => deleted_files/usr/src/cmd/ipf/etc/pfil.ap.sh
rename : usr/src/cmd/ipf/pfild/Makefile => deleted_files/usr/src/cmd/ipf/pfild/Makefile
rename : usr/src/cmd/ipf/pfild/pfild.c => deleted_files/usr/src/cmd/ipf/pfild/pfild.c
rename : usr/src/cmd/ipf/pfild/vas.c => deleted_files/usr/src/cmd/ipf/pfild/vas.c
rename : usr/src/cmd/ipf/svc/pfil => deleted_files/usr/src/cmd/ipf/svc/pfil
rename : usr/src/cmd/ipf/svc/pfil.xml => deleted_files/usr/src/cmd/ipf/svc/pfil.xml
rename : usr/src/uts/common/inet/pfil/compat.h => deleted_files/usr/src/uts/common/inet/pfil/compat.h
rename : usr/src/uts/common/inet/pfil/ndd.c => deleted_files/usr/src/uts/common/inet/pfil/ndd.c
rename : usr/src/uts/common/inet/pfil/os.h => deleted_files/usr/src/uts/common/inet/pfil/os.h
rename : usr/src/uts/common/inet/pfil/pfil.c => deleted_files/usr/src/uts/common/inet/pfil/pfil.c
rename : usr/src/uts/common/inet/pfil/pfil.conf => deleted_files/usr/src/uts/common/inet/pfil/pfil.conf
rename : usr/src/uts/common/inet/pfil/pfil.h => deleted_files/usr/src/uts/common/inet/pfil/pfil.h
rename : usr/src/uts/common/inet/pfil/pfild.h => deleted_files/usr/src/uts/common/inet/pfil/pfild.h
rename : usr/src/uts/common/inet/pfil/pfildrv.c => deleted_files/usr/src/uts/common/inet/pfil/pfildrv.c
rename : usr/src/uts/common/inet/pfil/pfilstream.c => deleted_files/usr/src/uts/common/inet/pfil/pfilstream.c
rename : usr/src/uts/common/inet/pfil/pkt.c => deleted_files/usr/src/uts/common/inet/pfil/pkt.c
rename : usr/src/uts/common/inet/pfil/qif.c => deleted_files/usr/src/uts/common/inet/pfil/qif.c
rename : usr/src/uts/common/inet/pfil/qif.h => deleted_files/usr/src/uts/common/inet/pfil/qif.h
rename : usr/src/uts/intel/pfil/Makefile => deleted_files/usr/src/uts/intel/pfil/Makefile
rename : usr/src/uts/sparc/pfil/Makefile => deleted_files/usr/src/uts/sparc/pfil/Makefile
rename : usr/src/uts/common/inet/pfil/misc.c => usr/src/uts/common/inet/ipf/misc.c

show more ...

5040252 /var/db/ipf not created when ipfilter is installed
6231450 consider moving ipmon.pid to /var/run
6346648 /lib/svc/method/pfil should use "-c" option for "svcprop -p general/enabled sv

5040252 /var/db/ipf not created when ipfilter is installed
6231450 consider moving ipmon.pid to /var/run
6346648 /lib/svc/method/pfil should use "-c" option for "svcprop -p general/enabled svc:/network/ipfilter"
6415517 pfil.ap is missing an entry for "ce" interface on x86
6428485 kernel vsnprintf does not handle %*.*s correctly

show more ...

6199500 IP Filter's ipmon should be run with absolute path name
6264454 "make all" fails in usr/src/cmd/ipf
6267778 reference count assertion failure in ip_ire.c
6330610 parsing error wit

6199500 IP Filter's ipmon should be run with absolute path name
6264454 "make all" fails in usr/src/cmd/ipf
6267778 reference count assertion failure in ip_ire.c
6330610 parsing error with ipnat and extended port matching
6332961 network/ipfilter ipfilter test tproxy_3h_01_rdr causes snv_22 to hang

show more ...

6261284 ipfilter can fail to startup without entering into maintenance mode

OpenSolaris Launch