Alexandr Nedvedicky

Packet gets blocked eventhough it should pass

Time to time I see a kind of CR which complains IPF falsely blocks packet, which should pass. The blog entry provides a kind of step by step guide what should be checked once you feel IPF goes crazy and starts to eat/drop packets which should be let in/let out.[Read More]

Posted at 06:01PM Jul 16, 2009 by Alexandr Nedvedicky in Sun  |  Comments[3]

State numbers in IPF

The CR 6562745 changes numbers assigned to TCP states in IPF. Currently state numbers used in Solaris and upstream ipfilter are different. The difference might confuse the admins, who are running a various versions of IPF. The fix of CR 6562745 will make problem gone.[Read More]

Posted at 03:24PM Jul 10, 2009 by Alexandr Nedvedicky in Personal  |  Comments[0]