Yes, it appears that the root cause of my frustration is that protocol names aren't completely standard from system to system, and I had an old IPF ruleset for IPV6 that used "icmpv6" (iirc), which causes the rule to throw an error because that's not what the protocol is called on illumos. Rather than consult /etc/protocols, I decided it would be better to just randomly start changing things, a clear sign that I was up working past my bed time :)
Thanks again for the tips and confirmation. Bill >> shouldn't that read 'block in quick on net0 proto ipv6-icmp' ? > > Correct. Despite the similar sounding names, icmp6 and icmp are not the same > protocol number. > > More at https://technotes.seastrom.com/2018/02/06/ipv6-icmp-is-not-icmp.html > > -r ------------------------------------------- smartos-discuss Archives: https://www.listbox.com/member/archive/184463/=now Modify Your Subscription: https://www.listbox.com/member/?member_id=25769125 Powered by Listbox: http://www.listbox.com