A few people have commented on the "new way of life" for interacting and managing ipfilter compared to the old init script methodology.
Firstly, if you were to disable ipfilter using svcadm and rely on /etc/rc2.d/S65ipfboot, ipfilter will start too late. Unfortunately the SMF interface is somewhat lacking, at present, in what it offers and we can just hope that it improves in the future. Right now, if you want to become familiar with what it is, point your web browser at: http://www.sun.com/bigadmin/content/selfheal/smf-quickstart.html Just don't ask me about it...I'm yet to be converted to this new way of life under Solaris :) Darren
