> >> Gang, > >> > >> While I'm the author of the how-to on replacing Sun's ipfilter > >> with the public domain version at: > >> > >> http://www.colby.edu/personal/j/jaearick/sysadmin/sol10.ipfilter.upgrade > >> > >> I have never upgraded ipfilter or pfil from one version to another > >> on any of my Solaris 10 boxes. I need to do so. Anybody have > >> any advice, warnings, or gotchas on this topic? Or is this new > >> territory that needs to be documented? > > > >pkgrm ipfx > >pkgrm ipf > >pkgrm pfil > >reboot > >pkgadd pfil > >pkgadd ipf > >pkgadd ipfx > > > >You asked in another email whether or not the reboot is avoidable. > >Yes, it is, but avoiding it means unplumb'ing all of your interfaces. > > > It's not possible to do a ifconfig modremove/modinsert of pfil?
That'll only remove the use of pfil over STREAMS devices for IPv4/IPv6. You can't do a "modremove" for the instance of pfil push'd over the NIC for ARP, etc - the catch with using the "autopush" approach. Darren
