I find the pfil is removed from OpenSolaris 0906. "pfil" is one ipfilter module in Solaris 10.
Another friend sugguest me maybe the cause is my slow CPU make the ipfilter service timeout. But I installed OpenSolaris 0906 on HP DL145G2 server, there is one AMD Opteron 2GHz CPU and 2GB physical Memory. And there is no GUI assistant to help me config the ipfilter on OpenSolaris. -Hejun > > > try if following steps work for you. > > 0,#svcs -a|egrep "pfil|ipf" > ???? svc:/network/pfil:default > ???? svc:/network/ipfilter:default > > 1,#ifconfig -a > > bge0:... > > 2,#vi /etc/ipf/pfil.ap > (uncomment bge #) > #... > bge -1 0 pfil > #... > > 3,#vi /etc/ipf/ipf.conf > block oracle in bge > pass sun in bge > > 4,#svcadm enable svc:/network/pfil:default > #svcadm enable svc:/network/ipfilter:default > > 5,#svcs pfil > #svcs ipfilter > > 6,#ipfstat -ionh > > > reference: > http://docs.sun.com/app/docs/doc/816-4554/gdwvu?a=view > http://blogs.sun.com/tonyn/entry/firewall_configuratio > n_in_opensolaris_2009 > > > > > Date: Thu, 14 Jan 2010 23:05:23 -0800 > > From: [email protected] > > To: [email protected] > > Subject: [ug-bjosug] To make the ipfilter available > must reboot the system? > > > > Dear all, > > > > I tried to enable the firewall on my OpenSolaris > 0906. > > I followed the guide to do the belew step: > > > > $ svcadm enable network/ipfilter > > $ svccfg -s network/ipfilter:default setprop > firewall_config_default/policy = astring: allow > > $ svcadm refresh network/ipfilter > > > > but the ipfilter is always in maintenance stage. > > > > I had to reboot my system,then the ipfilter is > online. > > > > I don't know whether there is a bug. > > > > -Hejun > > -- > > This message posted from opensolaris.org > > ______________________________________________________ > __________ > Hotmail: Powerful Free email with security by > Microsoft. > http://clk.atdmt.com/GBL/go/196390710/direct/01/ -- This message posted from opensolaris.org _______________________________________________ networking-discuss mailing list [email protected]
