Darren,
I have been using Sun's shipped version of ipfilter in the
past few months with my Solaris 10 systems. Things have
worked well with this setup (ipfilter 4.0.3, pfil 2.1.4).
In my last patch cycle on Feb 28, Sun patch 125014-02 got
applied to my systems (ipfilter 4.1.9, pfil 2.1.6) and now
I'm starting to see vague indications of network issues.
My biggest headache is with my mail server (a V490 using
multipathing, running sendmail). Email is piling up in the
outbound queues. If I put in an empty ipfilter ruleset and
restart ipfilter, then I can get most of this email to go when
I run the queues by hand. If I restart ipfilter with the
ruleset that I always had, things start piling up again.
I'm also having complaints from students in Australia not
being able to connect to our webmail servers, coincident with
this patch application to these systems.
I haven't opened a Sun case yet, because I don't have much to
go on. Got any insight here?
Jeff Earickson
Colby College
