Dear Solaris Experts,

I am using Solaris 10 ( June 2006 version ) and I intend
to activate the IP Filter feature. As I tried to activate
IPF service ( svc:/network/ipfilter:default ), it reports
that /etc/ipf/pfil.ap is not properly configured.

Issued command :
# cat /var/svc/log/network-ipfilter\:default.log

The result :
pfil not plumbed on any network interfaces.
No network traffic will be filtered.
See ipfilter(5) for more information.
[ Feb 25 11:16:53 Method "start" exited with status 96 ]

As I checked the /etc/ipf/pfil.ap , I could not understand
the content of the file. Is the first column represent
the Interface or the device in Solaris ?

Any explanation or url web reference would be appreciated.
Thank you in advance.

The /etc/ipf/pfil.ap file contain a comment suggesting you to read the autopush manual page to figure out this file's format.

This man page states:

The first field is a string that specifies
the major device name, as listed in the
/kernel/drv directory.

"man ipfilter" will tell you that you need to uncomment the line matching your interface.

Then read "System Administration Guide: IP Services" starting with:
http://docs.sun.com/app/docs/doc/816...aoq023u?a=view

Dear jlliagre,

Thank you for the explanation.
I am still exploring in the Sun's documentation.