Using IP Filter on Solaris 8

2007-12-24 22:54:00

Hi,

thanks to all that helped me to get IP-Filter compiled on Solaris 8. I
will write a summary for the "Compiling IP-Filter on Solaris 8" thread
as soon as I have IP Filter running which I have not yet.

I found a bunch of documentation about what to put in
/etc/opt/ipf/ipf.conf but I have no idea yet how to pass this file to
the filter.

 I have downloaded gcc 3.1 from sunfreeware.com
 I have downloaded the ip filter sources ip_fil3.4.27
 I then did

/usr/ccs/bin/make solaris
cd SunOS5
/usr/ccs/bin/make package

I believe this installed ip filter on my machine. No errors. I then
setup a very simply test conf file /etc/opt/ipf/ipf.conf with only one
line.

block in quick on dmfe1 all

dmfe1 is the second interface on my Netra X1. My idea was now that I
would no longer be able to ping, ftp,... from my notebook connected to
this second interface of the Netra. However, I am. What steps am I
missing? I found the following:

ipf - reads in a set of rules, from either stdin or a file, and adds
them to the kernels current list (appending them). It can also be used
to flush the current firewall rule set or delete individual firewall
rules.

So I simply tried

bash-2.03# ipf /etc/opt/ipf/ipf.conf
ipf: Cannot find ELF
Killed
bash-2.03#

without much luck. hints greatly appreciated. Thanks in advance!

Regards,

Andreas

Comments

Got something to say?

You must be logged in to post a comment.