uname -a
SunOS luna 5.9 Generic_117171-12 sun4u sparc SUNW,Ultra-5_10
isainfo -vk
64-bit sparcv9 kernel modules
ifconfig -a
lo0: flags=1000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4> mtu 8232 index 2
inet 127.0.0.1 netmask ff000000
ce3000: flags=201000842<BROADCAST,RUNNING,MULTICAST,IPv4,CoS> mtu 1500 index 3
inet x.y.u.i netmask ffffff00 broadcast x.y.u.29.145.255
ether 0:3:ba:6d:4d:91
hme0: flags=1000842<BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 4
inet 0.0.0.0 netmask ff000000
ether 8:0:20:cf:43:e2
( interfaces are down because i did ifconfig <ifc> down )
luna# ifconfig ce3000 up
luna# netstat -rn
Routing Table: IPv4
Destination Gateway Flags Ref Use Interface
-------------------- -------------------- ----- ----- ------ ---------
194.29.145.0 s.b.c.d U 1 0 ce3000
224.0.0.0 194.29.145.12 U 1 0 ce3000
127.0.0.1 127.0.0.1 UH 1 16 lo0
netstat -s -P ip
IPv4 ipForwarding = 1 ipDefaultTTL = 255
ipInReceives = 1388 ipInHdrErrors = 0
ipInAddrErrors = 0 ipInCksumErrs = 0
ipForwDatagrams = 0 ipForwProhibits = 0
ipInUnknownProtos = 9 ipInDiscards = 0
ipInDelivers = 755 ipOutRequests = 427
ipOutDiscards = 0 ipOutNoRoutes = 26
ipReasmTimeout = 60 ipReasmReqds = 0
ipReasmOKs = 0 ipReasmFails = 0
ipReasmDuplicates = 0 ipReasmPartDups = 0
ipFragOKs = 0 ipFragFails = 0
ipFragCreates = 0 ipRoutingDiscards = 0
tcpInErrs = 0 udpNoPorts = 210
udpInCksumErrs = 0 udpInOverflows = 0
rawipInOverflows = 0 ipsecInSucceeded = 0
ipsecInFailed = 0 ipInIPv6 = 0
ipOutIPv6 = 0 ipOutSwitchIPv6 = 4
I have instaled ipf 4.1.3 and pfil 2.1.4. All looked ok. I have added rules to
ipf.conf.
block in on ce3000 all
block in on hme0 all
pass in quick on ce3000 proto tcp from any to 194.29.145.12/255.255.255.0
port=22 flags S keep state
just to have time to configure other things.
I looked fine. ipfstat showed that ipf blocks everything exept ssh sessions (
Blocked packest xxxx).
Altought Blocked packets number was incresing but ipf was passing everything to
my machine.
strconf < /dev/<ifc> gives only the <ifc>
when i did strchg -h pfil < /dev/,`<ifc> strconf listed something like that
pfil
ce | hme
But it stills doesn't work, ipf passes all packest and says that it blocked
them all.
There is little problem, when i do ipfboot stop and ipfstart pfil disapears
from strconf listing.
I have pfil in interfaces modlist. I have even tried ipf.conf that looks as
follows
block in quick all.
What should I do? I didnt find anything on similar problems in mailing archive.
Regards
Bartosz Baranowski
