This section describes new IP Filter features.
For a complete listing of new features and a description of Oracle Solaris releases, see Oracle Solaris 10 9/10 What’s New
Beginning with the Solaris 10 7/07 release: Packet filter hooks are now used for packet filtering in Oracle Solaris. This feature offers the following advantages in system administration:
Packet filter hooks simplify the configuration of the IP filter.
Support for filtering packets across zones is now available.
Using filter hooks improves the performance of IP Filter.
Solaris 6/06 OS: For system administrators who have all or part of their network infrastructure configured with IPv6, IP Filter has been enhanced to include IPv6 packet filtering. IPv6 packet filtering can filter based on the source/destination IPv6 address, pools containing IPv6 addresses, and IPv6 extension headers.
The -6 option has been added to both the ipf command and the ipfstat command to use with IPv6. Although there is no change to the command line interface for the ipmon and ippool commands, these commands also support IPv6. The ipmon command has been enhanced to accommodate the logging of IPv6 packets, and the ippool command supports the inclusion of IPv6 addresses in pools.
For more information see IPv6 for IP Filter. For tasks associated with IPv6 packet filtering, see Chapter 26, IP Filter (Tasks).
Furthermore, support exists for IPv6 in IP Filter's network address translation (NAT) feature. For more information about NAT, see Using IP Filter's NAT Feature.