> >While I understand that you require the protection of ipfilter, > >what is it that you need from the bleeding edge version not > >offered in Solaris 10? > > Exactly. I have often wondered about this as well. What is the advantage of > ripping out IPF to be on the bleeding edge? I'd really like to know.
In some cases issues will be fixed in the open source code before Solaris can ship a patch. In many cases, a patch may not even ship for Solaris until an updated version of IPFilter is bundled in. Even if a patch is created, there may be a lag between it being finished internally and released. The best thing to do, if you have issues with IPFilter's stability on Solaris 10 or later is to find and buy one of the cheap support contracts and make full use of that. But some things will just take a long time...for example, if you wanted to use ipfauth on Solaris10, I imagine you'd have to wait until next year for all of those changes to get in, whereas you can just download 4.1.13 and zoom off straight away. Darren
