In some email I received from Phil Dibowitz, sie wrote: > Karl Fosburg wrote: > > Regarding S10 and ipfilter... Does anyone know if we could run ipfilter > > within a Solaris container? Basically, we'd like to NAT from one > > (inside) private IP domain to many different (outside) IP domains, some > > of which will overlap. > > I believe so. The solaris inside of a container will work just like > normal solaris (depending on how you configure it).
I missed the original Karl wrote, for some reason, but if he means "container" as in Zone, then the answer is NO. The answer is the same if he's referring to the security containers. The present system only allows for packet filtering on _physical_ interfaces, or more precisely, for IP packets entering or leaving the system. Darren
