Re: ipf, Sunscreen or ?

Chris,

Did you see the Sun BluePrint article describing how host-based
firewalls could be configured using SunScreen?  It may be a bit
more helpful than the product documentation in your specific case:

    http://www.sun.com/blueprints/0901/sunscreenlite.pdf

You can configure and administer SunScreen without a GUI.

g

Chris Pelton wrote:
> I would really like to get a software firewall running on some of my sun 
> boxes but was burned awhile back by ipf (could have been a 
> misconfiguration on my part but I never got the chance to research). I 
> don't need to do anything fancy, just block certain ports by subnet and 
> leave others open. I started reading the documentation on Sunscreen from 
> sun docs and wasn't horribly excited about it - I most definitely 
> wouldn't run apache just to get a GUI.
> 
> Any thoughts? experiences?
> 
> TIA,
> Chris
> 
> 

-- 
Glenn M. Brunette, Jr.
Principal Engineer, Chief Security Architect
Sun Professional Services, United States CTO
Sun Microsystems, Inc.