Securing the Network in Oracle^® Solaris 11.4

How to Remove Packages That Are Dependent on the firewall Package

If you do not plan to use PF to do NAT, or to use the ftp-proxy service, or to log PF packets, you can remove the packages that install these PF functions.

Before You Begin

To remove packages, you must become an administrator who is assigned the Software Installation rights profile. For more information, see Using Your Assigned Administrative Rights in Securing Users and Processes in Oracle Solaris 11.4.

1. Uninstall the FTP proxy package.

   By uninstalling this package, you cannot use PF to do NAT.

   $ pfexec pkg uninstall firewall/firewall-ftp-proxy

2. Uninstall the firewall-pflog package.

   By uninstalling this package, you cannot log packets that go through the firewall.

   $ pfexec pkg uninstall firewall/firewall-pflog