LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Solaris / OpenSolaris (https://www.linuxquestions.org/questions/solaris-opensolaris-20/)
-   -   Solaris 10 and IPTABLES (https://www.linuxquestions.org/questions/solaris-opensolaris-20/solaris-10-and-iptables-611225/)

metallica1973 01-04-2008 07:26 PM

Solaris 10 and IPTABLES
 
I am so used to using IPTABLES-NETFILTER and Linux. I now have to learn how to use Solaris 10 and I wanted to know if I can download and use IPTABLES as the firewall software for the distro?

jlliagre 01-04-2008 10:28 PM

You can't. iptables/netfilter only run on Linux. Solaris is using ipfilter, which is portable and not constraint by the GPL.

javier.e.menendez 01-05-2008 08:20 AM

Try ip filter; it's easy and powerful.

You can change directories into /etc/ipf. In there you will find a few files to edit. In 11/06 for instance, you have the file pfil.ap. Edit that file and uncomment the line with your network card type.

The ipf.conf file is the one where you put the rules of your firewall.

You can always create a file called ippool.conf to create pools (groups of ips for instance) and then implement rules (in ipf.conf) for the pools. Finally, you can create ipnat.conf for network address translation.

The main commands are ippool, ipf, ipfstat and ipnat.

You will have to unplumb the card and plumb it back up the first time (or reboot) to load the ipf module into the card (check this with ifconfig hme0 (for instance) modlist.

IPF is service based so type svcs -a | grep ipf and you should see two services (pfil and ipf). Have fun.

J.

metallica1973 01-05-2008 10:06 AM

I will check it out. thanks


All times are GMT -5. The time now is 12:17 AM.