Re: ipfilter 4.1.30 on Solaris 10/08

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
Gabriele Bulfon wrote:
| ...just a stupid question...I rebuilt (make solaris) and ran 
SunOS5/replace -f
| Do I have any sure way to reload all ipf without having to reboot the 
system?
| (using svcadm , not S65ipfboot).

Doing;
svcadm disable ipfilter
svcadm enable ipfilter

should cause the kernel module to be unloaded and then loaded again.
Check with "modinfo | grep ipf" after the disable.

To answer your other question, I suspect that the reason the other
function isn't on the stack is because of optimisations and either the
ipf_rand_push() is inline'd or a jump rather than a call on the stack.

Darren

| 
----------------------------------------------------------------------------------
|
| Da: Darren Reed <[email protected]>
| A: Gabriele Bulfon <[email protected]>
| Cc: [email protected]
| Data: 27 febbraio 2009 20.21.47 CET
| Oggetto: Re: ipfilter 4.1.30 on Solaris 10/08
|
| I suspect that your problem is this:
| 
http://sourceforge.net/tracker/index.php?func=detail&aid=2424604&group_id=169098&atid=849053
|
| And it's fixed by this patch:
| 
http://ipfilter.cvs.sourceforge.net/viewvc/ipfilter/ipfilter/arc4random.c?r1=1.1.2.5&r2=1.1.2.6
|
| You can get a new copy of arc4random.c from here:
| 
http://ipfilter.cvs.sourceforge.net/viewvc/*checkout*/ipfilter/ipfilter/arc4random.c?revision=1.1.2.6
|
| Darren
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
 
iEYEARECAAYFAkmsPpEACgkQP7JIXtvLbFXmjQCg5S3bzAg90rxPQKXM2AUHqHqF
eFYAoIvAiA9fGo4FTlbhmoiiHGpn3WCT
=CIDX
-----END PGP SIGNATURE-----