Re: sunscreen and stealth interfaces
Szymon Miotk <[email protected]> Mon, 15 Mar 2004 13:21:53 +0100
| Newsgroups | gmane.comp.security.sun |
|---|---|
| Organization | Crocom Computer Systems s.c. |
| Message-ID | <[email protected]> |
[email protected] wrote: > Hello, > > I am trying to test sunscreen in stealth mode (Solaris 9). > But have warning: > edit> verify > Warning: Stealth Interfaces detected but STEALTH_NET not specified. > Configuration verified successfully (not activated). > edit> save > Saved policy to test version 75 > edit> quit > # ssadm activate test > Warning: Stealth Interfaces detected but STEALTH_NET not specified. > Configuration activated successfully on fdelta. > > Can anybody explain me why the warning is occuring ? > > przemol > Because stealth interfaces are in the same network (it's a must, according to the manual) they need to know which IP numbers are on each interface. Look at the "Configuration examples" manual - there is a good example of stelth config. Regards, Szymon Miotk