Hello,
we have got problems with "keep state" ipf rules on a SunFire V120 with Solaris 9. This machine has one extra QuadFastEthernet (qfe) controller an two Ethernet RIO chips (eri) on board. This sums up to six ethernet interfaces. We did try the checksum parameter in /etc/system (set ip:dohwcksum=0) already. It did not help.
While the "keep state" rules work fine on the qfe interfaces, we've only got problems on eri0 and eri1. Could it be a problem of the state table size? Is there a reservation per interface on the state table?
Here our IPF Version
[EMAIL PROTECTED] > ipf -V ipf: IP Filter: v3.4.31 (496) Kernel: IP Filter: v3.4.31 Running: yes Log Flags: 0 = none set Default: pass all, Logging: available Active list: 0
I don't have access to the system from here, because it's at the customer's site. So here is some "soft data":
SunFire V120 Solaris 9 (only the required packages) one qfe board two eri onboard
Any suggestions are appreciated
lutz -- Lutz Aicher xna GmbH Konrad-Adenauer-Str. 15 72072 T�bingen Fon 07071/79 51 17 Fax 07071/79 51 11 mailto:[EMAIL PROTECTED]
