Ipfilter on not all interfaces

Hi,
i want to run ipfilter (from solaris 10) on only a few of my interfaces.
I tried a line like
bge 1 0 pfil
in /etc/ipf/pfil.ap. (On my box minor 1 seems to be bge0).
pfil is running, but ipfilter does not start due to:
pfil not plumbed on any network interfaces.
in /var/svc/log/network-ipfilter:default.log
The manual page for autopush suggests my config is ok.
Has anybody ever tried this? Does it work? How?
thanks, tom.

I found a workaround, but a poor one:
unplumb the device (ifconfig <device_name> unplumb)
autopush /etc/ipf/pfil.ap (assuming it's configured correctly, with the device name uncommented from the list)
re-plumb the device (ifconfig <device_name> plumb xxx.xxx.xx.xxx netmask 255.255.255.0 up)
enable the services:
svcadm enable pfil
svcadm enable ipfilter

Similar Messages

  • Interface is successfull but not all steps.

    I have imported an Interface from Repository A to Repository B. After this it's executing successfully in Repository B but not all steps. Due to this, the target table is not populating. Here is what I did.
    1. Created a master repository MA and work repository WA
    2. Developed the interface.
    3. Run the interface. It's working properly. See the snapshot at
    http://www.flickr.com/photos/uday_sunrise/478322469/
    4. Exported everything from here to files.
    5. Created a master repository MB and work repository WB
    6. Imported all the exported files in step 3 here in Synonym INSERT_UPDATE mode.
    7. Run the interface. It's completing successfully(without errors), but not completing all the
    steps. Due to this my target table is not populating.
    See the snapshot at http://www.flickr.com/photos/uday_sunrise/478322473/
    Please help where is the mistake.
    Thanks,
    Uday

    Take care of these things while you Import the Interface from one Repository to another.
    1.) u follow the import step wise
    First import the physical schemas.and map them to logical schame with samename and context as in previous repository.
    Then,import the models in designer that are to be used in your interface.
    Finally Import the Interface.One Important Thing to mentio here is that any mapping(in Diagram Tab) in an Interface needs to be done again.
    Your Screenshots are not visible .

  • BMW iPod Touch interface: some songs start mid way but not all.

    Hi, I upgraded from an iPod Classic to an iPod touch 4th generration and since doing so some (not all) songs will start at various points in the song when connected to my BMW iPod interface cable, eg 3:20 into a song, then another one may start 10 secs into a song etc. Some songs start at the begininning. This never happened with the Classic.
    Any ideas please ?

    The classic most likely it was working using and over version of the itunes software, the new iPod you have is using a newer version  of the aple software, there are 2 solutions, downgrade the software on the new device
    or see if there is any update for the iPod interface in your vehicle, some can be remove out of the vehicle and
    plug into a computer using a usb cable

  • Why not all jars picked up by ojdeloy and how to generate build.xml from command line and not JDEV GUI - quick question

    Hi All
    We have 11.1.1.7 ojdeploy to compile our app.
    We notice in the log that not all jars are used in classpath arguments when we explicitly set them up for compilation.
    eg:
      <path id="classpath">
        <pathelement location="../../Oracle/Middleware/oracle_common/modules/oracle.adf.share_11.1.1/commons-el.jar"/>
        <pathelement location="../../Oracle/Middleware/oracle_common/modules/oracle.adf.share_11.1.1/jsp-el-api.jar"/>
        <pathelement location="../../Oracle/Middleware/oracle_common/modules/oracle.adf.share_11.1.1/oracle-el.jar"/>
        <pathelement location="interface/public_html/WEB-INF/lib/a.jar"/>
        <pathelement location="interface/public_html/WEB-INF/lib/b.jar"/>
        <pathelement location="interface/public_html/WEB-INF/lib/c.jar"/>
        <pathelement location="interface/public_html/WEB-INF/lib/d.jar"/>
    </path>
    Log Output -
    [ora:ojdeploy] /path/to/Oracle/Middleware/jdk160_24/bin/javac
    [ora:ojdeploy] -g
      [ora:ojdeploy] -Xlint:all
      [ora:ojdeploy] -Xlint:-cast
    [ora:ojdeploy] -Xlint:-empty
      [ora:ojdeploy] -Xlint:-fallthrough
      [ora:ojdeploy] -Xlint:-path
      [ora:ojdeploy] -Xlint:-serial
      [ora:ojdeploy] -Xlint:-unchecked
      [ora:ojdeploy] -source 1.6
      [ora:ojdeploy] -target 1.6
      [ora:ojdeploy] -verbose
      [ora:ojdeploy] -encoding Cp1252
      [ora:ojdeploy] -classpath
    [ora:ojdeploy] /path/to/Oracle/Middleware/jdk160_24/jre/lib/resources.jar:
    [ora:ojdeploy] /path/to/Oracle/Middleware/jdk160_24/jre/lib/rt.jar:
      [ora:ojdeploy] /path/to/Oracle/Middleware/jdk160_24/jre/lib/jsse.jar:
        [ora:ojdeploy] /path/to/interface/public_html/WEB-INF/lib/a.jar"/>
        [ora:ojdeploy] /path/to/interface/public_html/WEB-INF/lib/c.jar"/>
    1- Is it because it depends on how jpr or jws are configured ?
    2- How can we automatically generate a build file of the application from command-line (as opposed to using Jdev IDE to click to generate a build.xml) ?

    The first  warning is happening because you're stating drivers for input devices without need. You haven't disabled hotplug so evdev gets used instead of kbd. This is normal, and you should change the driver line from kbd to evdev so that whatever options (if any) you've specified for the keyboard get parsed.
    The second warning is about you not installing acpid.
    The third I have no idea about, but look at the synaptics wiki. None of the (WW) are related to your video card.
    And every card that has 2 or more output ports show up as "two cards". You also don't need to specify the pci port in xorg.conf. edit: this is the general case with laptops, might be different for desktops.
    When I do lspci -v I get:
    00:02.0 VGA compatible controller: Intel Corporation Mobile 945GME Express Integrated Graphics Controller (rev 03) (prog-if 00 [VGA controller])
    Subsystem: Micro-Star International Co., Ltd. Device 0110
    Flags: bus master, fast devsel, latency 0, IRQ 16
    Memory at dfe80000 (32-bit, non-prefetchable) [size=512K]
    I/O ports at d0f0 [size=8]
    Memory at c0000000 (32-bit, prefetchable) [size=256M]
    Memory at dff00000 (32-bit, non-prefetchable) [size=256K]
    Expansion ROM at <unassigned> [disabled]
    Capabilities: <access denied>
    00:02.1 Display controller: Intel Corporation Mobile 945GM/GMS/GME, 943/940GML Express Integrated Graphics Controller (rev 03)
    Subsystem: Micro-Star International Co., Ltd. Device 0110
    Flags: bus master, fast devsel, latency 0
    Memory at dfe00000 (32-bit, non-prefetchable) [size=512K]
    Capabilities: <access denied>
    And it doesn't matter if it errs in trying to sli up with it self. That's just not a possibility.
    Last edited by gog (2009-10-15 23:59:49)

  • Not all Prefixes in VRF Tables are Reachable?

    Hello,
    During my studies with an MPLS VPN [MP-BGP] lab I found something unexpected.  I wonder if I am mistaken in my comprehension or if this normal:
    Not all prefixes in a VRF Table are pingable/reachable ?
    Seems that in the standard routing tables, if a prefix is there, then it is pingable/reachable.
    I've attached a sketch to help illustrate the lab I have set up and what I found.
    Below is output from ABR2 in the lab showing inability to ping 154.0.0.154, even though it is in the VRF IT table.  After "mpls ip" is configured on the "*" interface of Core2 the LDP Adjacency between Core2 and ABR2 comes up and ABR2 can ping everything in the VRF IT table, including 154.0.0.154
    Just seems like this is a "Gotcha" for one just coming into the world of MPLS VPN.  Just because a Prefix is in the VRF Table does not mean it is reachable?
    Thanks for any input.

    Hello Greg,
    Behavior which you have experienced is completly normal in MPLS environment. There is big difference between forwarding IP packets and MPLS frames.
    If you disable "mpls ip" on some interface along your LSP, LSP is broken and traffic is lost. MPLS VPN packets have two labels:
    - IGP label - according this label, packet is forwarded from ingress PE to egress PE
    - VPN label - based on this label, egress PE can put packet to particular VRF
    VPN label is known only to ingress and egress PE, if LSP is broken, IGP label is stripped off in the middle of the LSP and packet is forwarded based on VPN label. But as I said, intermediate routers do not know what to do with this packet, because label is unknow to them so packet is discarded.
    I hope this cleared some things for you.
    To further studies I would recommend this book:
    http://www.ciscopress.com/store/mpls-fundamentals-9781587051975
    Best Regards
    Please rate all helpful posts and close solved questions

  • Not all Typekit Fonts available in Muse?

    Hello,
    it seems that not all the fonts that are available in Typekit can be used in muse... has anyone a suggestion?

    Hi grafiklieschen,
    Abhishek is correct: you can only use and preview the free and open-source Typekit fonts in Muse. The full Typekit library isn't included in the font menu.
    You can still use Typekit on your website, though; the fonts just won't show up in the Muse preview. The Muse Insider wrote a post on how to insert the Typekit embed code from the Muse interface:
    http://museinsider.com/how-to-add-typekit-fonts-to-your-muse-site.html
    Or you can add the embed code to the Page Properties dialog within Muse, which will include it in the <head> of the page when you export your website.
    We hope to have a more complete integration of Typekit with Muse in the future, but I can't say yet when that will be available.
    I hope that this helps!  Best,
    -- liz

  • Not all commands work in CC

    Good grief this this is a dog. I had to go reinstall CS6. Command-S C and R centers and flushes text right. Command-S L does nothing. I'm more than a little frustrated with CC ID right now. This on time of changing doc size doesn't leave art on all pages centered.

    This is a known issue where the system is using the shortcuts. Turn them off in the system prefs.
    Granted the pain on this release seems a bit more severe than prior versions, but I'm honestly not all that surprised. There are always interface changes or other little things that take a bit of finding or getting used to when a new version comes out, but this time essentially the entire application was re-written for 64-bit support, and a lot of how it interacts with the OS has apparently changed.
    I think if you make an attempt to stick with it you'll eventually come to terms, sort of like driving a car with an automatic transmission for years and suddenly being thrust into the drivers seat and seeing a clutch pedal.

  • Why not use interfaces for constants?

    Hi,
    I have been getting conflicting views about why not use interfaces for constants?
    Can anyone shed some light on it?
    Piyush

    How so?
    If the constants are only used in a single classhow
    does it help to put them in a separate structute?
    (Ignoring the a type safe enumeration of course.)Well, mainly for readability. Suppose that you have a
    web application which has a servlet class
    "RedirectServlet", which takes a variable to redirect
    to a given JSP file. In the JSP files, you want to
    create forms which take this servlet as their action.
    You could of course put all these "redirect"
    constants in the RedirectServlet itself, but then
    it's kind of weird that you have to import a
    servlet in your jsp file to include these constants
    and to be able to write
    <form action="servlet/RedirectServlet?key=<%=
    RedirectServlet.HOMEPAGE %>> or so.
    Instead, you could create an interface called
    "RedirectConstants", and then your servlet
    RedirectServlet could implement this interface. Then
    your JSP can also access these constants via this
    interface.
    But then again, this is merely a matter of style, I
    fully agree that there is never a real _need_ to put
    constants in a separate structure if they're only used
    in a single class.Are you claiming that your example above is a single class?

  • Why is the stub generated from the implementation and not the interface?

    Why is the stub generated from the implementation and not the interface?

    Because if a remote server object implements multiple remote interfaces, its stub must implement all the same remote interfaces. The only way to know which interfaces to implement is to examine the server object class.

  • NetFlow on All Interfaces

    Hi All,
    We are using ManageEngine NetFlow Analyzer to monitor our network traffic.
    We have a few VLAN interfaces on the switch where we have enabled flow-export ingress and egress. We can see traffic that is passing between the VLANs on which flow-export has been configured. However, we have on interface that is connected to remote locations. We have not enabled flow-export on this interface. The idea was that, we have enabled ingress and egress flow-export, and the remote locations connect to VLANs where flow-export is already enabled, we must get all traffic from there. But we cannot see traffic from the remote locations, but we can see traffic from inside network to remote locations.
    After checking ManageEngine documentation, I see that we have to enable netflow on all interfaces to get accurate report. Can anyone let me know why this is required. We already have ingress and egress flow-export, and we must be getting all traffic. Please suggest.
    Thanks in advance,
    Faiz

    Hello Faiz,
    As you probably know, NetFlow by default is only collected ingress.  The ingress flows collected on all interfaces are used to display the outbound traffic on a selected interface.  I don't know about ManageEngine but, in some NetFlow solutions, interfaces without NetFlow/IPFIX enabled will not be displayed regardless of whethor or not flows are going out of it.
    Regarding ingress/egress being enabled on the same interface.  If you are using flexible NetFlow to configure the export, make sure the "flow direction" is exported in the template. The commands to export both look like this:
    ip flow monitor andrew-mon input
    ip flow monitor andrew-mon output
    Here is a good article on enabling ingress and egress NetFlow. Realize that just because you export both ingress and egress on a single interface and you export the direction, this doesn't mean the NetFlow solution will report on the data with a behavior that you would expect. 
    Ingress and egress flows are exported at the same time with only one difference "flow direction".  For this reason, this element must be included in the template to ensure that utilization isn't overstated in the flow report.  Again, this of course depends on your reporting solution.  
    Many vendors can't deal with a mixture of ingress and egress flows being enabled in a seemingly random fashion on the same device.  In other words, they expect all ingress or all egress.  Only a few vendors can handle a hybrid approach.
    I hope this helps. 
    Jake

  • Problems with Android 2.1 for Xperia Mini-Pro: no Twitter on Timescape and not all contacts restored - please help!

    Hello all!  I own an Xperia Mini-Pro which I updated with Android 2.1 yesterday.  Having some problems, the main ones being: 1) Timescape does not allow me to sign in to Twitter (it claims my username and password are incorrect, despite successful log-ons with the same details via Twitter Mobile); and 2) not all my backed-up contacts have been restored to my phonebook (and yet they still exist somewhere in the phone - I know this because I can bring up full contact details for people who've sent me SMS - but I cannot find them if I use the phonebook interface).  Someone please help?  Cheers - Jos

    I suggest that you try to clear data and any cache in for the Timescape app.
    Menu> Settings> Applications> Manage Applications> Click on the first hardware button (the one with four squares)> Filter> All> Timescape> Clear data and any cache.
    Then check if you get the same error when trying to log in to Twitter.
    Regarding the contacts I think you should check if they maybe filtered in the phone book. Open the phone book and click on the first hardware button (the one with four squares) > Contacts to view.
    Check if some of your contacts might be filtered.
     - Community Manager Sony Xperia Support Forum
    If you're new to our forums make sure that you have read our Discussion guidelines.
    If you want to get in touch with the local support team for your country please visit our contact page.

  • Set secondary DHCP on ALL interfaces.

    I wanted to post this as it's own question although it is posted already under "Ask the experts".
    We've added a secondary DHCP server to our network so that if one fails or is taken down for maintenance, we don't have a gap in service.  I need to add this new DHCP address to each interface for each controller in WCS.  I have 4 WLC's with 9 interfaces per.  That's 36 slow UI copy and pastes I'm not looking forward too.  Is there a quick way to propogate this secondary DNS to all interfaces?
    I've looked at Controller Templates and Controller Config Groups but can't seem to find my way through either to a solution to my situation.  Can you offer any advice?
    (Unrelated) Also, I can't post to this group from Firefox.  IE works fine.  Weird.

    I wanted to post this as it's own question although it is posted already under "Ask the experts".
    We've added a secondary DHCP server to our network so that if one fails or is taken down for maintenance, we don't have a gap in service.  I need to add this new DHCP address to each interface for each controller in WCS.  I have 4 WLC's with 9 interfaces per.  That's 36 slow UI copy and pastes I'm not looking forward too.  Is there a quick way to propogate this secondary DNS to all interfaces?
    I've looked at Controller Templates and Controller Config Groups but can't seem to find my way through either to a solution to my situation.  Can you offer any advice?
    (Unrelated) Also, I can't post to this group from Firefox.  IE works fine.  Weird.

  • Oracle db listening on all interfaces

    Hi,
    I have oracle xe installed on a server linux.
    Customer did some changes on the nw and now the database does not listen on all interfaces but just on 127.0.0.1:1521.
    I need Oracle listening on this port but on all available ips in this server, in other words 0.0.0.0:1521.
    I can I achieve this? I am not a db expert.
    I need to do this because I have many installed product, especially OID, and I do not know what IP is actually used to connect to the database.
    Thanks much.

    As1mov wrote:
    This is ok, the problem is that OID does not create the LDAP listner even though it seams to connect correctly to the database. Missing something here from the problem description. A LDAP listener/server is not the same an Oracle listener. Uses different tcp ports and different application protocols. Also, you mentioned Oracle XE - last time I looked this was vanilla Oracle RDBMS. No OID included.
    If you are talking about not being able to connect to an OID server - that requires oidmon and oidctl (console commands) to be used to start up the OID server (with its listener).
    Should I take care of something if I add a new ip address to the linux box?Assuming that the Oracle Listener is not configured with +(IP=FIRST)+, then no - I would expect that bouncing the listener is all that is needed for the listener to start listening on port 1521 using the +0.0.0.0+. And this can be checked by using netstat or lsof commands (the latter can be used to list the tcp ports opened by the listener process).
    If you have an error - please provide as much technical details as possible. Such as the listener.ora file, the alias entry used from tnsnames.ora, the output of a sqlplus session that attempted to use this alias to connect and failed, etc.
    I'm not clear at all as to what the problem is that you're facing with the listener and multiple interfaces/IP addresses on the same server.

  • Using multiple desktops with a 4 finger swipe on a Mac Book Pro running Lion- is there a way that I can allow Safari open on several but not all??  Looks like I can set it for one but not others.  All, one, or nothing

    Using multiple desktops with a 4 finger swipe on a Mac Book Pro running Lion- is there a way that I can allow Safari open on several but not all??  Looks like I can set it for one but not others.  All, one, or nothing

    Hey Eric,
    Thanks for taking the time. Unfortunately no that does not solve it. Same as swipe it will get me there and it will show separate programs spaced out. The issue I am having is that all my open word files are bunched up in a pile on top of each other. I can see the edges of each one but I want them to be separated from each other enough that I can visually identify what file is what.
    Again, thanks for trying, it is appreciated.

  • ITunes for Windows 7 64 bit, Windows Live Mail Contacts not (all?) syncing

    I have researched this as much as I can but cannot find a solution.
    I had my iPhone 4 synced to my Window Vista Home Premium PC using iTunes just fine until January when the PC motherboard crashed. No data was lost and all contacts have been restored to my new PC with is Windows 7 Home Premium (64 bit). My contacts are in Windows Live Mail (Windows Contacts) and I'm syncing via iTunes with "Sync Contacts with: Windows Contacts" selected.
    However, not all contacts are syncing with my iPhone. In fact, I'm not sure they are syncing at all, although the sync function goes through. It may be that the only ones that sync are those that existed before the new PC (i.e., the Windows Vista contacts which were in Windows Mail). I have created new contacts on both the PC using the new version Windows Live Mail and on the iPhone since the crash, and would like to get them synced up.
    Symptoms:
    1) Some specific contacts on PC are not on the iPhone after multiple sync attempts.
    I have so far positively identified one contact that did not sync. It shows in Windows Live Mail under Contacts, however it does NOT show up in my Windows username/Contacts folder!
    2) One Contacts group on PC is not on the iPhone, although two others are (they probably were from before the crash).
    I have so far positively identified one group that did not sync. It shows in Windows Live Mail under Contacts groups, however it does NOT show up in my Contacts folder as a .group file!
    3) The same group as #2 also does NOT show up in the iTunes group list under "Selected Groups" on iTunes, but the other two groups do. (I do not use "selected groups" because that disables "all contacts" syncing, but the groups are visible grayed out on the list.)
    4) As a test, I created a new contact on my iPhone, synced, and it shows up now in Windows Live Mail Contacts; it also shows up in my Windows username/Contacts folder.
    5) As a test, I created a new contact in Windows Live Mail and it does NOT show up in my username/Contacts folder. I synced the iPhone again and it does NOT show up on my iPhone contacts.
    OK folks, where are these missing contacts going and how can I get them synced??  Thanks!
    PS: I have the latest iTunes 10.5.3.3, no updates are available. However, Apple Support/iTunes seems to suggest Windows 7 64 bit either "does not use Windows Contacts" (which seemed quite wrong until I ran the tests above), and also that Windows 7 64 requires iTunes 10.4.1, which I cannot install because I have a later version installed. I would have assumed the correct version installed for my OS when I installed iTunes on the new PC. iTunes runs fine by itself and in coordination with my iPhone other than the above issue.
    PPS: This site seems potentially relevant, however is highly technical: http://liveunplugged.wordpress.com/2011/02/04/windows-live-mail-contacts-databas e/
    but doesn't help with this problem.

    I didn't get any help on this from the forum, but from studying around and experimenting with different approaches, I have come up with the following conclusions:
    Under Windows Vista, Windows Mail synced its contacts with Windows Contacts [which are in c:\users\username\contacts]. iPhone via iTunes synced with Windows Contacts. Changes to either Windows Mail Contacts or iPhone contacts would always update each other. Life was good.
    Under Windows 7, Windows LIVE Mail (WLM) does NOT sync its contacts with Windows Contacts. It puts them into a hidden database. If you have prior Windows Contacts and brought them along for the ride, they are still there in the folder but they are not connected to the WLM contacts database
    When you first set up Windows Live Mail, you can import your Windows Contacts and they appear to be synced. (In fact, they are, but only at that single point in time.)
    If you change any Windows Live Mail contact or add a new one, it does NOT change in Windows Contacts. It only changes in the WLM contacts database. It therefore does NOT sync to your iPhone.
    Similarly, if you change a contact on iPhone or add a new one, it will sync with Windows Contacts. However, this does NOT update your Windows Live Contacts.
    So, from what I can tell, here is what this means: to maintain a steady state, you have two choices:
    Whenever you update or add a contact, add it in either iPhone or Windows Contacts [the Windows Contacts folder has a "New Contact" button], and they will stay in sync with each other. Then manually update or add it in Windows Live Contacts to keep those up to date so you can use them for e-mail.  OR
    Whenever you update or add a contact, add it in either iPhone or Windows Contacts, and they will stay in sync with each other. DO NOT manually update Windows Live Contacts, but realize they are not always up to date. If an address needed for an e-mail is not in there, manually retrieve it from your Windows Contacts or your iPhone and insert it into the e-mail. [Having done that, you can right click on the address in the e-mail and add it to your WLM contacts if you want.] Periodically, manually delete all of your Windows Live Mail Contacts and then re-import your Windows Contacts into Windows Live Mail and, voila, your contacts are in sync again! (Isn't that great, I mean really awful??)
    NOTE: If you follow course #2, DO NOT import your Windows Contacts into Windows Live Mail contacts without deleting your existing Windows Live Mail contacts, or you will end up with a double set plus the new ones.
    FURTHER NOTE: I obviously can't make any guarantee you won't lose data if you follow course #2. Be sure you have a complete backup before deleting your WLM contacts. However, I will say that after experiencing a double set of WLM contacts (by failing to understand the first NOTE above), it was impossible to pick out the new items [WLM will now show you the date of entry or modification of the contact, so you can't sort by date], so I deleted all of them and re-imported my Windows Contacts and had a complete set again.
    AND ONE FINAL NOTE: I have not tested how any of this affects Windows Live Contacts used online outside of Windows Live Mail, because I do not use Windows Live online.
    Please post further comments if you have any more information on this topic.

Maybe you are looking for