Ahhh..... after removing icmp flow it works and I can't add icmp flow now as expected.
However that's very limiting... for example I can't mix remote_ip with local_ip and local_port (and hopefully remote_port in a future). In my example I would like to give icmp traffic and access to local ssh and snmpd a priority, then get usage reports when the servers connects to remote servers over a specified port (remote_port, currently not implemented). I can't do it right now. Are you planning on making it much more flexible? -- Robert Milkowski http://milek.blogspot.com -- This message posted from opensolaris.org
