Reply to myself.. I got default policy working, forgot to refresh after setting property with svccfg.
So for my use-case the only thing not there is the ability to filter non transport layer traffics, but on the other hand, it's not something I cannot live up with, default block all can serve as a catch-all. Good thing with SMF approach is that I can svccfg script to configure service firewall to some degree without operating directly on configuration file. Cheers, Ivan. -- This message posted from opensolaris.org _______________________________________________ networking-discuss mailing list [email protected]
