Fwd: Re: Packet forwarding only while snooping

Martin Gwerder <[email protected]>
Newsgroups gmane.comp.security.firewalls.ipfilter
Message-ID <20010_1235544439_49A4E976_20010_4497_1_20090225075331.1nw16l9a0wgg04wc@isis.exampool.ch>
Thanks Daren

Versions are:
ipf: IP Filter: v4.1.9 (592)
Kernel: IP Filter: v4.1.9
Running: yes
Log Flags: 0 = none set
Default: pass all, Logging: available
Active list: 1
Feature mask: 0x107

and

Solaris 10 8/07 s10s_u4wos_12b SPARC

Please forgive if I am not following your recommendation of
updating
blindly. The reason is simple:

1. The feature is working (but under somewhat "funny" conditions)
2. (Important) I am working in a bank and I am not free to update
at
will. All boxes are under a specific release cycle control and
breaking out of this mechanism causes me months of work
(unfortunately
this is not a joke - praise processes) [Please do not ask further
questions about this topic or I have a nervous breakdown]

Thanks for your help
Martin

----- Nachricht von [email protected] ---------
       Datum: Tue, 24 Feb 2009 19:09:39 -0800
         Von: Darren Reed <[email protected]>
Antwort an: [email protected]
     Betreff: Re: Packet forwarding only while snooping
          An: Thierry Bingen <[email protected]>
          Cc: Martin Gwerder <[email protected]>,
[email protected]

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> So my first piece of advice would be to install the latest kernel

> jumbo patch.
>
> Darren
>
> Thierry Bingen wrote:
> | For me, it's
> |
> |     Solaris 10 8/07 s10s_u4wos_12b SPARC
> |
> | Thanks,
> |
> | Thierry
> |
> | On 24 Feb 2009, at 18:05, Darren Reed wrote:
> |
> |> Martin Gwerder wrote:
> |>> Dear all
> |>>
> |>> I got a funny "feature" on a solaris 10 box. It is exactly
behaving as
> |>> Thierry Bingen described in his mail to this list on
2008-10-21.
> |>> Unfortunately no one has ever replied to this call for help.
> |>
> |> Which kernel udate?
> |> Is this Solaris 10 Update 4, 5 or 6?
> |>
> |> Darren
> |>
> |
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iEYEARECAAYFAkmktnMACgkQP7JIXtvLbFUsUACg4t6jXJDbFK1wbhRD7sf1P5Zg
> 56AAoOYjB/YA7PPozc0ODzeUga3lNift
> =/gaH
> -----END PGP SIGNATURE-----

----- Ende der Nachricht von [email protected] -----

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

----- Ende der weitergeleiteten Nachricht -----


Links:
------
[1] message.php?index=3730


----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.