Alexandr Nedvedicky

State numbers in IPF

The CR 6562745 changes numbers assigned to TCP states in IPF. Currently state numbers used in Solaris and upstream ipfilter are different. The difference might confuse the admins, who are running a various versions of IPF. The fix of CR 6562745 will make problem gone.[Read More]

Posted at 03:24PM Jul 10, 2009 by Alexandr Nedvedicky in Personal  |  Comments[0]

RST for loopback

Blog entry explains how IPF deals with sending RST/ICMP packets to loopback clients. If you don't want to read it all here you onesentence summary: To send RST/ICMP response to loopback client IPF will just reuse the offending packet mblock, will turn it into RST/ICMP response packet and pass it to IP stack, which will rout it the loopback client. [Read More]

Posted at 03:30PM Jun 16, 2009 by Alexandr Nedvedicky in Personal  |  Comments[2]