Why is this traffic NOT being blocked?

You are attempting to filter all UDP network traffic between two Solaris zones on the same
machine.
Zone 1 is using the IP address 192.168.84.1 on the interface ce0:1
Zone 2 is using the IP address 192.168.84.2 on the interface ce0:2
The Solaris IP Filter rules are in effect :
block in quick proto udp from 192.168.84.1 to 192.168.84.2
block in quick proto udp from 192.168.84.2 to 192.168.84.1
With these rules in effect, UDP traffic still passes between the two zones. Why is this traffic NOT
being blocked?

You are attempting to filter all UDP network traffic between two Solaris zones on the same
machine.
Zone 1 is using the IP address 192.168.84.1 on the interface ce0:1
Zone 2 is using the IP address 192.168.84.2 on the interface ce0:2
The Solaris IP Filter rules are in effect :
block in quick proto udp from 192.168.84.1 to 192.168.84.2
block in quick proto udp from 192.168.84.2 to 192.168.84.1
With these rules in effect, UDP traffic still passes between the two zones. Why is this traffic NOT
being blocked?

A.
At least one pass in rule is required.

B.
Solaris IP Filter can NOT filter traffic between zones on the same machine.

C.
Solaris IP Filter does NOT support CE interfaces.

D.
Solaris IP Filter can NOT be used to filter UDP traffic.



Leave a Reply 0

Your email address will not be published. Required fields are marked *