Re: IPFilter and IPv6

[Michael Lim(vpn)]

Darren Reed wrote:
For those that use IPFilter with IPv6, does the current
configuration cause any problems for you?
 

Not me personally but Solaris in general has problems with the separate 
configuration of IPv4 and IPv6 rules.

In short, Solaris is trying to consolidate configuration of both IPv4 
and IPv6 whenever possible as separate IPv4 and IPv6 configuration has 
caused numerous customer complaints and in this case could result in a 
security vulnerability.  (forgetting the -6 or editing ipf.conf but not 
ipf6.conf
will lead to unintended results)

I understand that the consolidation of IPv4 and IPv6 configuration files 
and kernel tables is not a trivial task and introduces a major shift in 
the administration model of IP Filter.  However, do  you intend to 
create a unified IP configuration file in the future?

Thanks,
Mike