Using IP Filter on Solaris 8

From: Andreas Hoeschler (ahoesch@smartsoft.de)
Date: Thu Jun 06 2002 - 09:27:59 EDT


Hi,

thanks to all that helped me to get IP-Filter compiled on Solaris 8. I
will write a summary for the "Compiling IP-Filter on Solaris 8" thread
as soon as I have IP Filter running which I have not yet.

I found a bunch of documentation about what to put in
/etc/opt/ipf/ipf.conf but I have no idea yet how to pass this file to
the filter.

 I have downloaded gcc 3.1 from sunfreeware.com
 I have downloaded the ip filter sources ip_fil3.4.27
 I then did

        /usr/ccs/bin/make solaris
        cd SunOS5
        /usr/ccs/bin/make package

I believe this installed ip filter on my machine. No errors. I then
setup a very simply test conf file /etc/opt/ipf/ipf.conf with only one
line.

block in quick on dmfe1 all

dmfe1 is the second interface on my Netra X1. My idea was now that I
would no longer be able to ping, ftp,... from my notebook connected to
this second interface of the Netra. However, I am. What steps am I
missing? I found the following:

ipf - reads in a set of rules, from either stdin or a file, and adds
them to the kernels current list (appending them). It can also be used
to flush the current firewall rule set or delete individual firewall
rules.

So I simply tried

bash-2.03# ipf /etc/opt/ipf/ipf.conf
ipf: Cannot find ELF
Killed
bash-2.03#

without much luck. hints greatly appreciated. Thanks in advance!

Regards,

    Andreas
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:24:25 EDT