On 02/10/09 14:52, Dan wrote: > Hi all, > > I've got TX on b105 and one physical interface and IP address shared between > the global zone and the labeled zones. > > With ifconfig -a i can see that the interface is all-zones, 192.168.1.1 > all-zones in /etc/hostname* and 192.168.1.1:cipso in > /etc/security/tsol/tnrhdb - however, no network connection in labeled zones. > > What else do I need to get network connection from labeled zones? >
You may be missing entries for remote hosts in the tnrhdb database file. For example, if you want to connect to an unlabeled peer 192.168.1.5 from the PUBLIC zone, you should have a tnrhdb entry 192.168.1.5:public assuming you've defined the public template in your /etc/security/tsol/tnrhtp database file. Jarrett > Many thanks, > Dan >