Zhenghui Xie wrote:

>I. Brief description:
>                             +---------------------------------+
>                            /| The default standalone ULP:     |
>                           / | 1. list of services to enable:  |
>                          /  |     - milestone/single-user     |
>                         /   |     - system/identity:node      |
>       -----------------+    |     - system/identity:domain    |
>       |network/profiled|    |     - network/smtp:sendmail     |
>       --------+--------+    |     - network/sshd              |
>               |         \   |     - etc                       |
>               |          \  | 2. list of services to disable: |
>               V           \ |     - network/iptunnel          |
>     -------------------      +     - network/ntp              |
>     |milestone/network|      |     - etc                      |
>     ---+-------+---+---      | 3. list of properties:         |
>       |       |   |         |     - hostname = foo            |
>       |       |   |         |     - name service = file       |
>       |       |   |         |     - etc                       |       
>       |       |   |         +---------------------------------+
>       |       |   |
>       |       |   +--------------------------------------+
>       |       |                                          |
>       |       +---------------+                          |
>       V                       V                          V
> ------------------      ----------                ---------------
>| network/loopback |    |   IPsec  |              |  IPfilter     |
> ------------------      ----------                ---------------
>                            | *                           | *
>                            V                             V
>                     ------------------           -----------------    
>                    | system/cryptosvc |         | filesystem/usr  |
>                     ------------------           -----------------
>* Currently ipfilter depends on network/physical and system/identity. We need
>  to work with IPfilter team to find out if these dependencies are needed and
>  how to replace them. We also need to check with IPsec team to see if any
>  dependencies other than system/cryptosvc are needed.
>

For IPFilter, once pfil dies we should be planning to move it
before network/physical (this depedency will disappear) but
still after system/identity.

Darren


Reply via email to