> On Tue, 2005-02-15 at 10:15 -0800, Bart Smaalders wrote:
> > You've added your driver to /etc/ipf/pfil.ap and uncommented it, right?
> > 
> > - Bart
> 
> Yes I did that. Maybe you want to take a look at the mailing list's
> archive--this thread could be found here:
> http://marc.theaimsgroup.com/?t=110786031100001&r=1&w=2

In the opening email, you say:
> I added a line to "/etc/ipf/pfil.ap" listing my network interface (sfe
> -1 0 pfil) and "ifconfig sfe1 modlist" shows:
>
> bash-3.00# ifconfig sfe1 modlist
> 0 arp
> 1 ip
> 2 pfil
> 3 sfe
> 
> So I assume, that autopush is correctly configured. "svcs -l pfil" and
> "svcs -l ipfilter" show both as online and enabled. When I am connected
> to the internet via dsl "ifconfig -a" looks like this:

The correct answer to your assumption is "yes & no".

Yes, autopush is correctly configured for firewalling on sfe1 but not
for sppp0.  I believe ou need(ed) to add another line to /etc/ipf/pfil.ap:

sppp -1 0 pfil

Doing so would match what Adam Summerfeld said -
http://marc.theaimsgroup.com/?l=ipfilter&m=110838401808532&w=2

The difference is subtle but important.

Cheers,
Darren

Reply via email to