Re: sunscreen and stealth interfaces

Szymon Miotk <[email protected]> Mon, 15 Mar 2004 13:21:53 +0100
Newsgroups gmane.comp.security.sun
Organization Crocom Computer Systems s.c.
Message-ID <[email protected]>
[email protected] wrote:
> Hello,
> 
> I am trying to test sunscreen in stealth mode (Solaris 9).
> But have warning:
> edit> verify
> Warning: Stealth Interfaces detected but STEALTH_NET not specified.
> Configuration verified successfully (not activated).
> edit> save
> Saved policy to test version 75
> edit> quit
> # ssadm activate test
> Warning: Stealth Interfaces detected but STEALTH_NET not specified.
> Configuration activated successfully on fdelta.
> 
> Can anybody explain me why the warning is occuring ?
> 
> przemol
> 

Because stealth interfaces are in the same network (it's a must, 
according to the manual) they need to know which IP numbers are on each 
interface.

Look at the "Configuration examples" manual - there is a good example of 
stelth config.

Regards,
Szymon Miotk