What's New in Oracle Solaris IP Filter

This section describes new Oracle Solaris IP Filter features.

For a complete listing of new features and a description of Oracle Solaris releases, see Oracle Solaris 10 9/10 What’s New

Packet Filter Hooks

Beginning with the Solaris 10 7/07 release: Packet filter hooks are now used for packet filtering in Oracle Solaris. This feature offers the following advantages in system administration:

• Packet filter hooks simplify the configuration of the Oracle Solaris IP filter.

• Support for filtering packets across zones is now available.

• Using filter hooks improves the performance of Oracle Solaris IP Filter.

For further details about these hooks, see Packet Filter Hooks. For tasks that are associated with packet filter hooks, see Chapter 26, Oracle Solaris IP Filter (Tasks).

IPv6 Packet Filtering for Oracle Solaris IP Filter

Solaris 10 6/06: For system administrators who have all or part of their network infrastructure configured with IPv6, Oracle Solaris IP Filter has been enhanced to include IPv6 packet filtering. IPv6 packet filtering can filter based on the source/destination IPv6 address, pools containing IPv6 addresses, and IPv6 extension headers.

The -6 option has been added to both the ipf command and the ipfstat command to use with IPv6. Although there is no change to the command line interface for the ipmon and ippool commands, these commands also support IPv6. The ipmon command has been enhanced to accommodate the logging of IPv6 packets, and the ippool command supports the inclusion of IPv6 addresses in pools.

For more information see IPv6 for Oracle Solaris IP Filter. For tasks associated with IPv6 packet filtering, see Chapter 26, Oracle Solaris IP Filter (Tasks).