Summary: Zones and IPFilter

Hello all,

thanks to <peter.van.gemert@xxxxxxxxxxxxx> who exhaustingly answered my question. The rules for the zones go into the ipfilter configuration of the global zone. Adding something like

	block in log on bge2 from any to <external ip of zone>/32

to /etc/ipf/ipf.conf in the gloabl zone doe sthe trick.

Thanks a lot!

Regards,

  Andreas

IPF can only be run in the global zone, so you need to define rules in the global zone that block/allow traffic to the zone's ip address. But is impossible to setup rules that block traffic between non-global zones. 
_______________________________________________
sunmanagers mailing list
sunmanagers@xxxxxxxxxxxxxxx
http://www.sunmanagers.org/mailman/listinfo/sunmanagers

Relevant Pages

  • zone shutdown
    ... Does init 0 in the global zone do a clean shutdown in non-global zones. ...
    (comp.unix.solaris)
  • Re: What does :kill really do in a SMF manifest?
    ... Dave Miner wrote: ... the global zone without qualifying them to be only the global zone, you'll get any processes in non-global zones, as well. ...
    (comp.unix.solaris)