Re: Fwd: Re: Packet forwarding only while snooping

Darren Reed <[email protected]>
Newsgroups gmane.comp.security.firewalls.ipfilter
Message-ID <18833_1235587174_49A59066_18833_1255_1_49A58FE4.9030704@reed.wattle.id.au>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
Martin Gwerder wrote:
| Thanks Daren
|
| Versions are:
| ipf: IP Filter: v4.1.9 (592)
| Kernel: IP Filter: v4.1.9
| Running: yes
| Log Flags: 0 = none set
| Default: pass all, Logging: available
| Active list: 1
| Feature mask: 0x107
|
| and
|
| Solaris 10 8/07 s10s_u4wos_12b SPARC
|
| Please forgive if I am not following your recommendation of
| updating
| blindly. The reason is simple:
|
| 1. The feature is working (but under somewhat "funny" conditions)
| 2. (Important) I am working in a bank and I am not free to update
| at
| will. All boxes are under a specific release cycle control and
| breaking out of this mechanism causes me months of work
| (unfortunately
| this is not a joke - praise processes) [Please do not ask further
| questions about this topic or I have a nervous breakdown]

There is a very important question here...
Why haven't you rung up Sun's Support for Solaris and filed a bug?

There's absolutely no way for me to help you or provide you with
a bug fix for the ipfilter that comes bundled with Solaris short of
replacing it completely with what you can download.

Darren
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
 
iEYEARECAAYFAkmlj+QACgkQP7JIXtvLbFXzGgCeNgU0Z2GfRa9RdCrmrCRYLO55
24cAoKewcEt+NwkRufAS+SofHhmtLeRx
=1B9H
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.