Darren
Thanks for the advice. The reason why I did not file a bug so far is
simple: I assumed I am too stupid to handle ipfilter. If snoop "can get
it to work in a split of a second" so my asumption "it must be a silly
little setting and not a bug".
Maybe this is a mistake but I tend to first look at what I am doing and
assume that I am making a mistake. 98% of all code programmed in this
world is error free and why should I hit something else than these 98%.
But getting back to the main problem: Considering what you have said so
far it seems not to be just a matter of a flag, a setting, arule or
something similar. I further more assume from the answers you have given
so in the mailinglist I have furthermore to assume that you are very
familiar with ipfilter itself. So if you can not think of anything maybe
it is really time to file a bug.
Thanks for your help. I really apreciate it even if it did not solve my
problem. I know how hard it is to diagnose a system without having acces
to it. Not starting from a updated host is a pain (but unfortunately
none of the options I can take).
Many thanks
Martin
Am 25.02.2009 19:37, schrieb Darren Reed:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Martin Gwerder wrote:
| Thanks Daren
|
| Versions are:
| ipf: IP Filter: v4.1.9 (592)
| Kernel: IP Filter: v4.1.9
| Running: yes
| Log Flags: 0 = none set
| Default: pass all, Logging: available
| Active list: 1
| Feature mask: 0x107
|
| and
|
| Solaris 10 8/07 s10s_u4wos_12b SPARC
|
| Please forgive if I am not following your recommendation of
| updating
| blindly. The reason is simple:
|
| 1. The feature is working (but under somewhat "funny" conditions)
| 2. (Important) I am working in a bank and I am not free to update
| at
| will. All boxes are under a specific release cycle control and
| breaking out of this mechanism causes me months of work
| (unfortunately
| this is not a joke - praise processes) [Please do not ask further
| questions about this topic or I have a nervous breakdown]
There is a very important question here...
Why haven't you rung up Sun's Support for Solaris and filed a bug?
There's absolutely no way for me to help you or provide you with
a bug fix for the ipfilter that comes bundled with Solaris short of
replacing it completely with what you can download.
Darren
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEARECAAYFAkmlj+QACgkQP7JIXtvLbFXzGgCeNgU0Z2GfRa9RdCrmrCRYLO55
24cAoKewcEt+NwkRufAS+SofHhmtLeRx
=1B9H
-----END PGP SIGNATURE-----
