Re: Fwd: Re: Packet forwarding only while snooping

Darren

Thanks for the advice. The reason why I did not file a bug so far is 
simple: I assumed I am too stupid to handle ipfilter. If snoop "can get 
it to work in a split of a second" so my asumption "it must be a silly 
little setting and not a bug".

Maybe this is a mistake but I tend to first look at what I am doing and 
assume that I am making a mistake. 98% of all code programmed in this 
world is error free and why should I hit something else than these 98%.

But getting back to the main problem: Considering what you have said so 
far it seems not to be just a matter of a flag, a setting, arule or 
something similar. I further more assume from the answers you have given 
so in the mailinglist I have furthermore to assume that you are very 
familiar with ipfilter itself. So if you can not think of anything maybe 
it is really time to file a bug.

Thanks for your help. I really apreciate it even if it did not solve my 
problem. I know how hard it is to diagnose a system without having acces 
to it. Not starting from a updated host is a pain (but unfortunately 
none of the options I can take).

Many thanks
Martin

Am 25.02.2009 19:37, schrieb Darren Reed:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Martin Gwerder wrote:
> | Thanks Daren
> |
> | Versions are:
> | ipf: IP Filter: v4.1.9 (592)
> | Kernel: IP Filter: v4.1.9
> | Running: yes
> | Log Flags: 0 = none set
> | Default: pass all, Logging: available
> | Active list: 1
> | Feature mask: 0x107
> |
> | and
> |
> | Solaris 10 8/07 s10s_u4wos_12b SPARC
> |
> | Please forgive if I am not following your recommendation of
> | updating
> | blindly. The reason is simple:
> |
> | 1. The feature is working (but under somewhat "funny" conditions)
> | 2. (Important) I am working in a bank and I am not free to update
> | at
> | will. All boxes are under a specific release cycle control and
> | breaking out of this mechanism causes me months of work
> | (unfortunately
> | this is not a joke - praise processes) [Please do not ask further
> | questions about this topic or I have a nervous breakdown]
>
> There is a very important question here...
> Why haven't you rung up Sun's Support for Solaris and filed a bug?
>
> There's absolutely no way for me to help you or provide you with
> a bug fix for the ipfilter that comes bundled with Solaris short of
> replacing it completely with what you can download.
>
> Darren
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iEYEARECAAYFAkmlj+QACgkQP7JIXtvLbFXzGgCeNgU0Z2GfRa9RdCrmrCRYLO55
> 24cAoKewcEt+NwkRufAS+SofHhmtLeRx
> =1B9H
> -----END PGP SIGNATURE-----
>