Securing the Network in Oracle^® Solaris 11.3

Working With IP Filter Rule Sets

You might want to modify or deactivate packet filtering and NAT rules under the following circumstances:

• For testing purposes

• To troubleshoot system problems when you think the problems are caused by IP Filter

The following task map lists the procedures associated with IP Filter rule sets.

Table 6  Working With IP Filter Rule Sets Task Map

Task For Instructions View the active packet filtering rule set. How to View the Active Packet Filtering Rule Set View an inactive packet filtering rule set. How to View the Inactive Packet Filtering Rule Set Activate a different active rule set. How to Activate a Different or Updated Packet Filtering Rule Set Remove a rule set. How to Remove a Packet Filtering Rule Set Add rules to the rule sets. How to Append Rules to the Active Packet Filtering Rule Set How to Append Rules to the Inactive Packet Filtering Rule Set Move between active and inactive rule sets. How to Switch Between Active and Inactive Packet Filtering Rule Sets Delete an inactive rule set from the kernel. How to Remove an Inactive Packet Filtering Rule Set From the Kernel View active NAT rules. How to View Active NAT Rules in IP Filter Remove NAT rules. How to Deactivate NAT Rules in IP Filter Add rules to active NAT rules. How to Append Rules to the NAT Packet Filtering Rules View active address pools. How to View Active Address Pools Remove an address pool. How to Remove an Address Pool Add rules to an address pool. How to Append Rules to an Address Pool