Hello all you smart people:
I have A Solaris10 Host that has three interfaces. Eri0, ce0 & ce1. It is running two zones 1 is for dns and one is for mail The system is setup as follows.
Eri0 is configured for the global zone only.
Ce0 is configured for the dns zone &
Ce1 is configured for the mail zone.
The global zone on boot up will plumb the ce0 and ce1 interface but will not configure them. The zones will configure the interface. So what I get
Is ce0:
flags=201000842<BROADCAST,RUNNING,MULTICAST,IPv4,CoS> mtu 1500 index 3
inet 0.0.0.0 netmask 0
and ce0:1
flags=201000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4,CoS> mtu 1500 index 3
zone ECOMdns0
inet xxx.xxx.xxx.xxx netmask fffffff0 broadcast xxx.xxx.xxx.xxx
This configuration provides security to the global zone by not allowing access from local zone interfaces.
Problem is that configuring ipfilter on the global zone (since only the global controls the interface) It will not filter the local zones interfaces
Thanks in advance
