Hi Perddy,

There's still a pfil service entry, but it seems to be a place holder
(haven't checked for what). If you check "ifconfig -a modlist"
you will see there are no longer a "pfil" STREAMS modules,
which used to be loaded on each interface being filtered.

Rgds, Stuart.


>>> perddy <[EMAIL PROTECTED]> 21/12/07 7:48 PM >>>
HI:

   I had downloaded Solaris10 from the www.sun.com, and it's version
is   Solaris 10 8/07 s10x_u4wos_12b X86.

  I know "Beginning with the Solaris 10 8/07 release, packet filter
hooks replace the pfil module to enable Solaris IP filter." , but when
I use "svcs | grep pfil", it show :

online         Dec_19   svc:/network/pfil:default
online         Dec_19   svc:/system/rmtmpfiles:default
online         16:42:25 svc:/network/ipfilter:default


the pfil driver still can be found. and when i  use "ipf  -V", it show :

ipf: IP Filter: v4.1.9 (500)
Kernel: IP Filter: v4.1.9
Running: yes
Log Flags: 0 = none set
Default: pass all, Logging: available
Active list: 1
Feature mask: 0x107

In the ipf version , whether pfil is still used ?  all these confuse
me . hope your help.


                                      perddy
                                   2007.12.21

Reply via email to