greetings, from the faq:
-------------------------------------- Solaris Before proceeding, if you already have a version of IP Filter installed on your system, remove it with "pkgrm ipf". First, you need to download and install "pfil". This is a STREAMS interface that provides a general mechanism to use for intercepting packets, removing need for firewall code to be written as a STREAMS module. This can be downloaded from http://coombs.anu.edu.au/~avalon/pfil-2.1.4.tar.gz. Unpack this and type "make" in the pfil directory. Once compelte, type "make install" to kick off the installation. Having got this far, you now need to download the latest IP Filter package and compile/install that. The source code for IP Filter can be obtained from: http://coombs.anu.edu.au/~avalon/ip_fil4.1.tar.gz. This should be unpacked into the same directory as "pfil" is. The directory layout will look like this: /directory/ip_fil4.1 /directory/pfil This complete, do a "make solaris" in the ipf40a30 directory, followed by a "cd SunOS5; make install". You will need to reboot for it to become active. -------------------------------------- why does ipfilter require a reboot for it to become active? pfil doesn't, with modinsert. I can add the driver and update devlinks and ucblinks without reboot. ipfboot gives me a kernel error unless I reboot the server. cheers, --jerome
