6881 SMF ipfilter tries to unload module in zones6882 SMF ipfilter lacks a property for a IPv6 custom policy file6884 SMF ipfilter tuple_get_port needs to remove backslashesReviewed by: Cody Mello
6881 SMF ipfilter tries to unload module in zones6882 SMF ipfilter lacks a property for a IPv6 custom policy file6884 SMF ipfilter tuple_get_port needs to remove backslashesReviewed by: Cody Mello <melloc@joyent.com>Approved by: Robert Mustacchi <rm@joyent.com>(cherry picked from commit 4633596157bed4ec72e97b18076ba80477d7d818)
show more ...
6123 SMF ipfilter support needs improvementReviewed by: Toomas Soome <tsoome@me.com>Reviewed by: Attila Fülöp <attila@fueloep.org>Reviewed by: Cody Mello <melloc@joyent.com>Approved by: Dan McDon
6123 SMF ipfilter support needs improvementReviewed by: Toomas Soome <tsoome@me.com>Reviewed by: Attila Fülöp <attila@fueloep.org>Reviewed by: Cody Mello <melloc@joyent.com>Approved by: Dan McDonald <danmcd@omniti.com>
6959722 ipfilter service timeouts in osol_141 and onward.
PSARC/2008/532 NWAM Phase 1PSARC/2009/577 Network Auto-Magic (NWAM) Phase 1 UpdatesPSARC/2010/049 Network Auto-Magic (NWAM) Phase 1 Updates part 24087814 User friendly utility wanted for network c
PSARC/2008/532 NWAM Phase 1PSARC/2009/577 Network Auto-Magic (NWAM) Phase 1 UpdatesPSARC/2010/049 Network Auto-Magic (NWAM) Phase 1 Updates part 24087814 User friendly utility wanted for network config, able to add network interfaces.6509720 support configuration using DHCP "inform" and static IP address6553627 network/physical:default and network/physical:nwam should be mutually-exclusive (perhaps a property)6609581 nwam does not start the dns/client service after configuring the network6664072 nwam profiles should include name service configuration properties6723947 setting static MAC address should be possible6794043 NWAM needs more complete profile support6914190 Support for unmanaged network interfaces in NWAM - hands off6921971 nwamd fails to run teardown/net-svc after suspend/resume--HG--rename : usr/src/cmd/cmd-inet/lib/nwamd/interface.c => usr/src/cmd/cmd-inet/lib/nwamd/ncu_ip.crename : usr/src/cmd/cmd-inet/lib/nwamd/wireless.c => usr/src/cmd/cmd-inet/lib/nwamd/ncu_phys.crename : usr/src/cmd/cmd-inet/lib/nwamd/events.c => usr/src/cmd/cmd-inet/lib/nwamd/routing_events.crename : usr/src/cmd/cmd-inet/lib/nwamd/functions.h => usr/src/cmd/cmd-inet/lib/nwamd/util.h
6761070 PSARC 2008/580 Solaris host-based firewall6236609 svc.startd resets auxiliary state on svcadm mark maintenance6762307 SMF - expressing a service's maintenance state by request of another se
6761070 PSARC 2008/580 Solaris host-based firewall6236609 svc.startd resets auxiliary state on svcadm mark maintenance6762307 SMF - expressing a service's maintenance state by request of another service
5008943 /etc/init.d/ipfboot pause/resume functionality broken5010756 "\" in configuration file does not work correctly6181489 ipfilter sends out confusing messages.6449288 Makefiles in usr/src/cmd
5008943 /etc/init.d/ipfboot pause/resume functionality broken5010756 "\" in configuration file does not work correctly6181489 ipfilter sends out confusing messages.6449288 Makefiles in usr/src/cmd/ipf are missing CDDL6449291 package prototype files in usr/src/pkgdefs/SUNWipfh missing CDDL6508325 stale pfil-related rules in Makefile.rules6661948 ipmon.pid file can be rendered invisible6714319 IPFilter causes failure of IPv6 compliance tests.6766614 fin_state costs more than it is worth6767239 fin_nat causes more trouble than it is worth6788299 Array overrun in ipfilter6789766 ipfs usage output is misleading6792026 ipnat panics in Divide zero exception
6231883 ipfilter service lacks refresh method6561278 pressing 'q' to quit ipfstat -t will cause underlying bash and tcsh to terminate but not ksh
PSARC 2006/366 IP Instances6289221 RFE: Need virtualized ip-stack for each local zone6512601 panic in ipsec_in_tag - allocation failure6514637 error message from dhcpagent: add_pkt_opt: option typ
PSARC 2006/366 IP Instances6289221 RFE: Need virtualized ip-stack for each local zone6512601 panic in ipsec_in_tag - allocation failure6514637 error message from dhcpagent: add_pkt_opt: option type 60 is missing required value6364643 RFE: allow persistent setting of interface flags per zone6307539 RFE: Invalid network address causes zone boot failure5041214 Allow IPMP configuration with zones5005887 RFE: zoneadmd should support plumbing an interface via DHCP4991139 RFE: zones should provide a mechanism to configure a defaultrouter for a zone6218378 zoneadmd doesn't set the netmask for non-loopback addresses hosted on lo04963280 zones: need to virtualize the IPv6 default address selection mechanism4963285 zones: need support of stateless address autoconfiguration for IPv65048068 zones don't boot if one of its interfaces has failed5057154 RFE: ability to change interface status from within a zone4963287 zones should support the plumbing of the first (and only) logical interface4978517 TCP privileged port space should be partitioned per zone5023347 zones don't work well with network routes other than default4963372 investigate whether global zone can act as a router for local zones6378364 RFE: Allow each zone to have its own virtual IPFilter
6489821 Functions ip_nexthop and ip_nexthop_route should be removed6489978 Local IPv6 connections with IPv6 extensions headers fail6490546 Panic when creating a 6to4 tunnel6492882 wrong error text
6489821 Functions ip_nexthop and ip_nexthop_route should be removed6489978 Local IPv6 connections with IPv6 extensions headers fail6490546 Panic when creating a 6to4 tunnel6492882 wrong error text in /lib/svc/method/ipfilter for IPv66493833 assert failed due to unloading ipf with populated state table
PSARC 2006/552 Quagga SMF Modifications6312914 routeadm needs to support smf-based routing services6440342 remove redundancies in smf-related makefiles by moving manifest rules to usr/src/cmd/Makef
PSARC 2006/552 Quagga SMF Modifications6312914 routeadm needs to support smf-based routing services6440342 remove redundancies in smf-related makefiles by moving manifest rules to usr/src/cmd/Makefile.targ--HG--rename : usr/src/cmd/cmd-inet/usr.sbin/in.rdisc.c => usr/src/cmd/cmd-inet/usr.sbin/in.rdisc/in.rdisc.crename : usr/src/cmd/cmd-inet/usr.sbin/routeadm.c => usr/src/cmd/cmd-inet/usr.sbin/routeadm/routeadm.crename : deleted_files/usr/src/cmd/volmgt/etc/Makefile => usr/src/cmd/volmgt/etc/Makefile
6343157 svcadm disable ipfilter does not flush the rules6484763 PFHOOKS breaks post-ACQUIRE ESP processing6485599 msgpullup/pullupmsg now implies either M_DATA or M_MULTIDATA6485731 panic in fil.c
6343157 svcadm disable ipfilter does not flush the rules6484763 PFHOOKS breaks post-ACQUIRE ESP processing6485599 msgpullup/pullupmsg now implies either M_DATA or M_MULTIDATA6485731 panic in fil.c trying to release ipf_mutex while not held6485761 ipfilter kernel module always enables itself on load6485781 mutex_enter: bad mutex in ipflog_read6485943 MSG_FWCOOKED_* survived attempted genocide6486513 too much of a good thing can be bad6486575 use ipf -D twice will panic the system6487360 physical_in hook inserted twice into ip_input() for onnv putback
PSARC/2005/334 Packet Filtering HooksPSARC/2006/321 ARP packet filtering Hooks6401219 use of pullupmsg() considered destructive - clears h/w checksum flags6418698 PSARC/2005/334 - Packet Filtering
PSARC/2005/334 Packet Filtering HooksPSARC/2006/321 ARP packet filtering Hooks6401219 use of pullupmsg() considered destructive - clears h/w checksum flags6418698 PSARC/2005/334 - Packet Filtering Hooks API6449290 package prototype files in usr/src/pkgdefs/SUNWipfr missing CDDL6449292 package prototype files in usr/src/pkgdefs/SUNWipfu missing CDDL6449296 Makefiles for ipf kernel module building missing CDDL6473996 "fastroute" + "nat" packets cause memory leaks in ipfilter--HG--rename : usr/src/cmd/ipf/etc/pfil.ap.sh => deleted_files/usr/src/cmd/ipf/etc/pfil.ap.shrename : usr/src/cmd/ipf/pfild/Makefile => deleted_files/usr/src/cmd/ipf/pfild/Makefilerename : usr/src/cmd/ipf/pfild/pfild.c => deleted_files/usr/src/cmd/ipf/pfild/pfild.crename : usr/src/cmd/ipf/pfild/vas.c => deleted_files/usr/src/cmd/ipf/pfild/vas.crename : usr/src/cmd/ipf/svc/pfil => deleted_files/usr/src/cmd/ipf/svc/pfilrename : usr/src/cmd/ipf/svc/pfil.xml => deleted_files/usr/src/cmd/ipf/svc/pfil.xmlrename : usr/src/uts/common/inet/pfil/compat.h => deleted_files/usr/src/uts/common/inet/pfil/compat.hrename : usr/src/uts/common/inet/pfil/ndd.c => deleted_files/usr/src/uts/common/inet/pfil/ndd.crename : usr/src/uts/common/inet/pfil/os.h => deleted_files/usr/src/uts/common/inet/pfil/os.hrename : usr/src/uts/common/inet/pfil/pfil.c => deleted_files/usr/src/uts/common/inet/pfil/pfil.crename : usr/src/uts/common/inet/pfil/pfil.conf => deleted_files/usr/src/uts/common/inet/pfil/pfil.confrename : usr/src/uts/common/inet/pfil/pfil.h => deleted_files/usr/src/uts/common/inet/pfil/pfil.hrename : usr/src/uts/common/inet/pfil/pfild.h => deleted_files/usr/src/uts/common/inet/pfil/pfild.hrename : usr/src/uts/common/inet/pfil/pfildrv.c => deleted_files/usr/src/uts/common/inet/pfil/pfildrv.crename : usr/src/uts/common/inet/pfil/pfilstream.c => deleted_files/usr/src/uts/common/inet/pfil/pfilstream.crename : usr/src/uts/common/inet/pfil/pkt.c => deleted_files/usr/src/uts/common/inet/pfil/pkt.crename : usr/src/uts/common/inet/pfil/qif.c => deleted_files/usr/src/uts/common/inet/pfil/qif.crename : usr/src/uts/common/inet/pfil/qif.h => deleted_files/usr/src/uts/common/inet/pfil/qif.hrename : usr/src/uts/intel/pfil/Makefile => deleted_files/usr/src/uts/intel/pfil/Makefilerename : usr/src/uts/sparc/pfil/Makefile => deleted_files/usr/src/uts/sparc/pfil/Makefilerename : usr/src/uts/common/inet/pfil/misc.c => usr/src/uts/common/inet/ipf/misc.c
5040252 /var/db/ipf not created when ipfilter is installed6231450 consider moving ipmon.pid to /var/run6346648 /lib/svc/method/pfil should use "-c" option for "svcprop -p general/enabled svc:/netwo
5040252 /var/db/ipf not created when ipfilter is installed6231450 consider moving ipmon.pid to /var/run6346648 /lib/svc/method/pfil should use "-c" option for "svcprop -p general/enabled svc:/network/ipfilter"6415517 pfil.ap is missing an entry for "ce" interface on x866428485 kernel vsnprintf does not handle %*.*s correctly
6199500 IP Filter's ipmon should be run with absolute path name6264454 "make all" fails in usr/src/cmd/ipf6267778 reference count assertion failure in ip_ire.c6330610 parsing error with ipnat and
6199500 IP Filter's ipmon should be run with absolute path name6264454 "make all" fails in usr/src/cmd/ipf6267778 reference count assertion failure in ip_ire.c6330610 parsing error with ipnat and extended port matching6332961 network/ipfilter ipfilter test tproxy_3h_01_rdr causes snv_22 to hang
6261284 ipfilter can fail to startup without entering into maintenance mode
OpenSolaris Launch