Rudolph Pereira wrote:
Hello,
I've been setting up ipfilter on a couple of solaris 9 boxes and noticed
that the ipfilter solaris package (built from the source) sets up
/etc/rc2.d/S65ipfboot to start ipfilter on boot. Unfortunately, routing
(particularly the default route) isn't setup until S69 which means that
on some machines that use a nameserver outside their local subnet and
hostnames in ipf.conf, things don't quite work.
The breakup of services into various rc scripts and the lack of
flexibility with how to order the services makes it very hard
IPFilter is currently set to run before the default route is established
for security reasons.
While I understand your problem here, I believe that changing the
order of the ipfilter init script being executed isn't necessarily the
best way to do it.
Darren
