5198 Want alternate global zone rule set for each ipf netstack5197 Global zone should be able to manage NGZ ipf stateReviewed by: Jerry Jelinek <jerry.jelinek@joyent.com>Reviewed by: Robert Mustac
5198 Want alternate global zone rule set for each ipf netstack5197 Global zone should be able to manage NGZ ipf stateReviewed by: Jerry Jelinek <jerry.jelinek@joyent.com>Reviewed by: Robert Mustacchi <rm@joyent.com>Reviewed by: Dan McDonald <danmcd@omniti.com>Reviewed by: Darren Reed <darrenr@fastmail.net>Approved by: Richard Lowe <richlowe@richlowe.net>
show more ...
4072 make clobber leaves trashReviewed by: Albert Lee <trisk@nexenta.com>Reviewed by: Dan McDonald <danmcd@nexenta.com>Reviewed by: Marcel Telka <marcel.telka@nexenta.com>Reviewed by: Richard Low
4072 make clobber leaves trashReviewed by: Albert Lee <trisk@nexenta.com>Reviewed by: Dan McDonald <danmcd@nexenta.com>Reviewed by: Marcel Telka <marcel.telka@nexenta.com>Reviewed by: Richard Lowe <richlowe@richlowe.net>Approved by: Garrett D'Amore <garrett@damore.org>
2933 compiler warning gags need better granularityReviewed by: Eric Schrock <eric.schrock@delphix.com>Approved by: Garrett D'Amore <garrett@damore.org>
PSARC 2010/299 GNU/Linux/BSD compatibility functions6960818 add get_nprocs(), getline(), strdupa(), strndup() to libc6901783 strndup would be nice6824404 libc should provide ffsl() & ffsll()67939
PSARC 2010/299 GNU/Linux/BSD compatibility functions6960818 add get_nprocs(), getline(), strdupa(), strndup() to libc6901783 strndup would be nice6824404 libc should provide ffsl() & ffsll()6793969 RFE: Add|stpcpy|to libc6735446 Want a __progname symbol for BSD-style source compatibility6421095 Solaris should provide strcasestr6275498 Provide string compare functions wcscasecmp,wcsncasecmp in solaris like linux--HG--rename : usr/src/lib/libc/port/gen/strcasecmp.c => usr/src/lib/libc/port/gen/ascii_strcasecmp.crename : usr/src/lib/libc/port/gen/strncasecmp.c => usr/src/lib/libc/port/gen/ascii_strncasecmp.crename : usr/src/lib/libc/sparc/gen/strcasecmp.s => usr/src/lib/libc/sparc/gen/ascii_strcasecmp.srename : usr/src/lib/libc/sparcv9/gen/strcasecmp.s => usr/src/lib/libc/sparcv9/gen/ascii_strcasecmp.s
6959722 ipfilter service timeouts in osol_141 and onward.
6918206 Packets double counted on with "call now" rules6918859 pools should track bytes as well as packets for better usability6921174 ippool -ld crashes if nodes are inserted with ioctl and policy
6918206 Packets double counted on with "call now" rules6918859 pools should track bytes as well as packets for better usability6921174 ippool -ld crashes if nodes are inserted with ioctl and policy rules are not in place
PSARC/2008/532 NWAM Phase 1PSARC/2009/577 Network Auto-Magic (NWAM) Phase 1 UpdatesPSARC/2010/049 Network Auto-Magic (NWAM) Phase 1 Updates part 24087814 User friendly utility wanted for network c
PSARC/2008/532 NWAM Phase 1PSARC/2009/577 Network Auto-Magic (NWAM) Phase 1 UpdatesPSARC/2010/049 Network Auto-Magic (NWAM) Phase 1 Updates part 24087814 User friendly utility wanted for network config, able to add network interfaces.6509720 support configuration using DHCP "inform" and static IP address6553627 network/physical:default and network/physical:nwam should be mutually-exclusive (perhaps a property)6609581 nwam does not start the dns/client service after configuring the network6664072 nwam profiles should include name service configuration properties6723947 setting static MAC address should be possible6794043 NWAM needs more complete profile support6914190 Support for unmanaged network interfaces in NWAM - hands off6921971 nwamd fails to run teardown/net-svc after suspend/resume--HG--rename : usr/src/cmd/cmd-inet/lib/nwamd/interface.c => usr/src/cmd/cmd-inet/lib/nwamd/ncu_ip.crename : usr/src/cmd/cmd-inet/lib/nwamd/wireless.c => usr/src/cmd/cmd-inet/lib/nwamd/ncu_phys.crename : usr/src/cmd/cmd-inet/lib/nwamd/events.c => usr/src/cmd/cmd-inet/lib/nwamd/routing_events.crename : usr/src/cmd/cmd-inet/lib/nwamd/functions.h => usr/src/cmd/cmd-inet/lib/nwamd/util.h
6772643 Packets dropped at ipfil_sendpkt if interface index is set at plumb time6891782 ipftest fails to run6897532 Race condition window arround fr_enable_active is still opened6897632 nic_event_
6772643 Packets dropped at ipfil_sendpkt if interface index is set at plumb time6891782 ipftest fails to run6897532 Race condition window arround fr_enable_active is still opened6897632 nic_event_v* hook should check if IPF is running before it will proceed further
6864230 hiho, hiho, it'ch chtime for CH to goPortions contributed by Rich Lowe
6761070 PSARC 2008/580 Solaris host-based firewall6236609 svc.startd resets auxiliary state on svcadm mark maintenance6762307 SMF - expressing a service's maintenance state by request of another se
6761070 PSARC 2008/580 Solaris host-based firewall6236609 svc.startd resets auxiliary state on svcadm mark maintenance6762307 SMF - expressing a service's maintenance state by request of another service
6803232 parsing empty config files results in an error6803834 regression test failure for legacy/i13
5008943 /etc/init.d/ipfboot pause/resume functionality broken5010756 "\" in configuration file does not work correctly6181489 ipfilter sends out confusing messages.6449288 Makefiles in usr/src/cmd
5008943 /etc/init.d/ipfboot pause/resume functionality broken5010756 "\" in configuration file does not work correctly6181489 ipfilter sends out confusing messages.6449288 Makefiles in usr/src/cmd/ipf are missing CDDL6449291 package prototype files in usr/src/pkgdefs/SUNWipfh missing CDDL6508325 stale pfil-related rules in Makefile.rules6661948 ipmon.pid file can be rendered invisible6714319 IPFilter causes failure of IPv6 compliance tests.6766614 fin_state costs more than it is worth6767239 fin_nat causes more trouble than it is worth6788299 Array overrun in ipfilter6789766 ipfs usage output is misleading6792026 ipnat panics in Divide zero exception
6617470 ipftest is reported as false positive by wsdiff
6749429 printing out of fragment information is confused6749445 ipfstat -f does not show ttl but rather expiration tick6783820 IPF preauth crash6730356 legacy test regressions: i2, i4, i11
6677460 ipfilter automatic flushing of state table entries needs to work the same as it does for NAT6566976 state limit check works when limit is reached only6566982 state limit is not check when i
6677460 ipfilter automatic flushing of state table entries needs to work the same as it does for NAT6566976 state limit check works when limit is reached only6566982 state limit is not check when inserting states via IOCTL
6743637 ipfstat prints certain certain counters two times6744095 fix c-style in ip_state.c in fr_matchstate() et. al.6744100 add a comment for CR 6653172 to fil.c6725139 OOW problem still present
6743637 ipfstat prints certain certain counters two times6744095 fix c-style in ip_state.c in fr_matchstate() et. al.6744100 add a comment for CR 6653172 to fil.c6725139 OOW problem still present after a patch 127888-09 has been applied6657378 IPF address pools does not match addresses reliably for IPv66726717 IPF persistent tunables still don't work with stack instances6743002 ipf_property_update() is too picky6731974 incorrect calculation in fr_pullup6749974 IPF does not know whether packet comes from local client (loopback) or from NIC interface
PSARC/2008/219 Committed API for packet interceptionPSARC/2008/335 Corrections for Committed API for packet interceptionPSARC/2008/557 Revision to net instance notification API4844507 Solaris need
PSARC/2008/219 Committed API for packet interceptionPSARC/2008/335 Corrections for Committed API for packet interceptionPSARC/2008/557 Revision to net instance notification API4844507 Solaris needs stable interface for packet filtering software6705155 ipf_stack_init() assumes kmem_alloc with KM_NOSLEEP never fails
6713984 if a nat entry is created, but the packet gets blocked, the entry should be removed6718524 ipfilter incorrectly tracks and handles orphan state table and nat table entries6742115 IPfilter:
6713984 if a nat entry is created, but the packet gets blocked, the entry should be removed6718524 ipfilter incorrectly tracks and handles orphan state table and nat table entries6742115 IPfilter: NAT entries added with SIOCSTPUT are ignored if no rules exist.6528443 ipnat -l shows more sessions than ipf_nattable_max
6726575 ipfilter needs to be able to do randomised port mapping6730614 random port numbers are in the wrong range of numbers
PSARC 2008/250 ipv6 NAT for IPFilter6600474 RFE: Need ipv6 support on NAT
6719268 enabling ipfilter causes up to 80% or more drop in packet throughput for multi-stream workloads6721215 ipfilter panic in ipf:fr_derefrule after restoring state table6723213 IPfilter: NAT su
6719268 enabling ipfilter causes up to 80% or more drop in packet throughput for multi-stream workloads6721215 ipfilter panic in ipf:fr_derefrule after restoring state table6723213 IPfilter: NAT suffers performance hit by holding exclusive locks longer than required
6505685 Problems with applying "to" rule in IP Filter6562635 TCP options are not processed correctly6562648 IPF may drop connection, which chooses to scale window6562721 IPF should also check SACK
6505685 Problems with applying "to" rule in IP Filter6562635 TCP options are not processed correctly6562648 IPF may drop connection, which chooses to scale window6562721 IPF should also check SACK when doing stateful inspection6595876 state timer should be reset when retransmission is seen6651775 ipf does not handle half estab. connections well (conn. hangs with connection match result 4/0)
6685076 ippool and other ipf utilities have possible race condition6685092 ipfilter list processing function(s) have unsafe edge case(s)
6677590 ON is now required to deliver license info via pkg copyright files6684249 third party license cleanup--HG--rename : usr/src/pkgdefs/SUNWdsdu/copyright => deleted_files/usr/src/pkgdefs/SUN
6677590 ON is now required to deliver license info via pkg copyright files6684249 third party license cleanup--HG--rename : usr/src/pkgdefs/SUNWdsdu/copyright => deleted_files/usr/src/pkgdefs/SUNWdsdu/copyrightrename : usr/src/pkgdefs/SUNWgrubS/copyright => deleted_files/usr/src/pkgdefs/SUNWgrubS/copyrightrename : usr/src/pkgdefs/SUNWipfr/copyright => deleted_files/usr/src/pkgdefs/SUNWipfr/copyrightrename : usr/src/pkgdefs/SUNWipfu/copyright => deleted_files/usr/src/pkgdefs/SUNWipfu/copyrightrename : usr/src/pkgdefs/SUNWlibsasl/copyright => deleted_files/usr/src/pkgdefs/SUNWlibsasl/copyright.inrename : usr/src/pkgdefs/SUNWpppdu/copyright => deleted_files/usr/src/pkgdefs/SUNWpppdu/copyrightrename : usr/src/pkgdefs/SUNWpppg/copyright => deleted_files/usr/src/pkgdefs/SUNWpppg/copyrightrename : usr/src/pkgdefs/SUNWpppgS/copyright => deleted_files/usr/src/pkgdefs/SUNWpppgS/copyrightrename : usr/src/pkgdefs/SUNWsndmr/copyright => deleted_files/usr/src/pkgdefs/SUNWsndmr/copyrightrename : usr/src/pkgdefs/SUNWsndmu/copyright => deleted_files/usr/src/pkgdefs/SUNWsndmu/copyrightrename : usr/src/pkgdefs/SUNWsshcu/copyright => deleted_files/usr/src/pkgdefs/SUNWsshcu/copyrightrename : usr/src/pkgdefs/SUNWsshdr/copyright => deleted_files/usr/src/pkgdefs/SUNWsshdr/copyrightrename : usr/src/pkgdefs/SUNWsshdu/copyright => deleted_files/usr/src/pkgdefs/SUNWsshdu/copyrightrename : usr/src/pkgdefs/SUNWsshr/copyright => deleted_files/usr/src/pkgdefs/SUNWsshr/copyrightrename : usr/src/pkgdefs/SUNWsshu/copyright => deleted_files/usr/src/pkgdefs/SUNWsshu/copyrightrename : usr/src/pkgdefs/SUNWtcpd/copyright => deleted_files/usr/src/pkgdefs/SUNWtcpd/copyrightrename : usr/src/pkgdefs/SUNWtcpdS/copyright => deleted_files/usr/src/pkgdefs/SUNWtcpdS/copyrightrename : usr/src/pkgdefs/SUNWtecla/copyright => deleted_files/usr/src/pkgdefs/SUNWtecla/copyrightrename : usr/src/uts/common/sys/i2o/THIRDPARTYLICENSE => deleted_files/usr/src/uts/common/sys/i2o/THIRDPARTYLICENSErename : usr/src/uts/common/sys/i2o/THIRDPARTYLICENSE.descrip => deleted_files/usr/src/uts/common/sys/i2o/THIRDPARTYLICENSE.descriprename : usr/src/pkgdefs/SUNWnetcat/copyright => usr/src/cmd/cmd-inet/usr.bin/nc/THIRDPARTYLICENSErename : usr/src/pkgdefs/SUNWcsl/copyright => usr/src/pkgdefs/SUNWcsl/lic_AMDrename : usr/src/pkgdefs/SUNWgrub/copyright => usr/src/pkgdefs/SUNWgrub/grubcreditsrename : usr/src/pkgdefs/SUNWgss/copyright => usr/src/pkgdefs/SUNWgss/gss_licenserename : usr/src/pkgdefs/SUNWocfh/copyright => usr/src/pkgdefs/SUNWocfh/copyright.inrename : usr/src/pkgdefs/SUNWroute/copyright => usr/src/pkgdefs/SUNWroute/copyright.inrename : usr/src/pkgdefs/common_files/copyright => usr/src/pkgdefs/license_files/cr_Sunrename : usr/src/pkgdefs/SUNWdrmr/LICENSE => usr/src/uts/common/io/drm/THIRDPARTYLICENSErename : usr/src/pkgdefs/SUNWpppd/copyright => usr/src/uts/common/io/ppp/THIRDPARTYLICENSE
PSARC/2007/666 Broadcast/multicast packet notification through pfhooks6633786 ipfilter with no mbcast not working as expected6645812 GLD packets are not flagged correctly as multicast/broadcast
123