Hello,
I'd like to ask you if you have any clue to my problem regarding
IPFilter. I'm using this System "SunOS unknown 5.11 snv_79a sun4u sparc
SUNW,Sun-Fire-280R".

The problem is the following:
 - I have set up IPFilter with the /etc/ipf/ipf.conf file as it can be
seen below.
 - I activated IPFilter with the "svcadm enable ipfilter" command
 - IPFilter seems to work (Status "Online" with svcs -a command)

 - From now on there seems to be random latency on the ssh connection
(wheter I use the existing one or new ones). These latencies are
sometimes not existing and can reach up to a few minutes. 

- If I disable the Filter everything is back to normal, i.e. no latency.


Does anybody have an idea what could cause this behaviour or can anybody
tell me what I have done wrong/missed with the configuration? Thank you.
 
regards,
 Felix

###
#begin /etc/ipf/ipf.conf:
###
pass in quick proto tcp from any to any port = 14690 flags S keep state keep 
frags
pass in quick proto tcp/udp from any to any port = 53 keep state 
pass in quick proto tcp from any to any port = 80 flags S keep state keep frags

pass out quick proto tcp from 141.70.124.129/24 to any flags S keep state keep 
frags
pass out quick proto udp from 141.70.124.129/24 to any keep state
pass out quick proto icmp from 141.70.124.129/24 to any keep state 

pass out quick proto udp from 10.5.250.1/24 to any keep state
pass out quick proto tcp from 10.5.250.1/24 to any flags S keep state keep frags
pass out quick proto icmp from 10.5.250.1/24 to any keep state

block in quick all
block out quick all

###
#end /etc/ipf/ipf.conf
###
 
 
This message posted from opensolaris.org
_______________________________________________
networking-discuss mailing list
networking-discuss@opensolaris.org

Reply via email to