OBSOLETE Patch-ID# 143593-08

6952562 significant performance drop in ISP environment
6975201 IPFT_SIZE strikes back
 
(from 143593-07)
 
6859479 IPF dup-to prevents packets from being forwarded to destination
6912962 need to compute chksum for packet duped on loopback interface
6929403 IPF should discard packet silently on OOW event
 
(from 143593-06)
 
6935086 IPFilter state module cannot handle IP options correctly
 
(from 143593-05)
 
        This revision accumulates generic Sustaining patch 141505-10
        into Solaris S10U9 update.
 
(from 143593-04)
 
        This revision accumulates generic Sustaining patch 141505-09
        into Solaris S10U9 update.
 
(from 143593-03)
 
        This revision accumulates generic Sustaining patch 141505-08
        into Solaris S10U9 update.
 
(from 143593-02)
 
        This revision accumulates generic Sustaining patch 141505-07
        into Solaris S10U9 update.
 
(from 143593-01)
 
        This revision accumulates generic Sustaining patch 141505-06
        into Solaris S10U9 update.
 
(from 141505-10)
 
6918206 packets double-counted with "call now" rules
6918859 pools should track bytes as well as packets for better usability
6921174 ippool -ld crashes if nodes are inserted with ioctl and policy rules not in place
 
(from 141505-09)
 
6900850 limit for number of states in the state table is too low by default
6910994 fr_checkstate function does not release ipf_state mutex in some cases
 
(from 141505-08)
 
6772643 packets dropped at ipfil_sendpkt if interface index is set at plumb time
6897632 nic_event_v* hook should check if IPF is running before it will proceed further
 
(from 141505-07)
 
6879740 ipnat rules can't be added into IP NAT because of regression of 6792026
6910106 state entry is->is_ref count must be set to 1 on creation/cloning
6911469 errata for backport of 'fin_nat causes more trouble than it is worth'
 
(from 141505-06)
 
6859313 large number of rules in ipfilter decreases throughput performance
6891782 ipftest fails to run
 
(from 141505-05)
 
6688940 ipf module panicked in get_unit() on NULL pointer
6766614 fin_state costs more than it is worth
6767239 fin_nat causes more trouble than it is worth
 
(from 141505-04)
 
	This revision accumulates generic Sustaining patch 141021-03
	into Solaris S10U8 update.
 
(from 141505-03)
 
	This revision accumulates generic Sustaining patch 141021-02
	into Solaris S10U8 update.
 
(from 141505-02)
 
	This revision accumulates generic Sustaining patch 141021-01
	into Solaris S10U8 update.
 
(from 141505-01)
 
6792026 ipnat panics in Divide zero exception
 
(from 141021-03)
 
6562745 adapt a better TCP statemachine emulation (fr_tcp_age()) from upstream version
6827271 ipfilter TCP state emulation ends up in 5/0 state (Established/Closed)
 
(from 141021-02)
 
6747420 ipfilter fr_send_reset()/fr_send_icmp() does not work for loopback clients
6845913 fr_make_icmp_*() uses TH_SYN/TH_FIN for testing fin_flx - it's not the intention
 
(from 141021-01)
 
6681520 panic in frpr_icmp() when trying to access dblk previously freed in fr_coalesce()

--------------------------------
 
Please refer to the man pages for instructions on using 'patchadd'
and 'patchrm' commands provided with Solaris.
 
The following example installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/123456-07
 
The following example removes a patch from a standalone system:
 
       example# patchrm 123456-07
 
For additional examples please see the appropriate man pages. Any
other special or non-generic installation instructions should be
described below as special instructions.

-----------------------------
 
None.