OBSOLETE Patch-ID# 148380-13

18726170 panic in ipf nat_delrdr
19211002 ipfilter forgot to check round-robin rules stored in rrlist
19280169 all fixes for ipfilter round-robin rules should also be applied to IPv6
19525575 panic: page fault in fr_checknatout
19525625 panic: page fault in nat_addnat
19573567 ipnat parser should be able to detect duplicate bimap rules
19573608 ipfilter should use separate pointers for RDR and MAP rules
19574834 ipfilter rule survives VNIC deletion
19789979 ipfilter should not update mask value when deleting NAT rules
19790350 ipnat doesn't print usage
 
(from 148380-12)
 
17016187 buffer overrun in fac_toname of facpri.c
18341264 ipfstat not reporting log level correctly
 
(from 148380-11)
 
17008193 logsize tunable is ignored by IPF
 
(from 148380-10)
 
17056912 ipfilter may block valid ICMP echo replies
 
(from 148380-09)
 
15709147 Bad Trap panic in fr_fraglookup - probable bad ipfr_hnext pointer
15815851 IPF is a traffic load disbalancer using round-robin for rdr NAT rules
15819422 ipf fr_fraglookup loops in fragments table
 
(from 148380-08)
 
15766564 panic in ip_wput_local() ipha_src and ipha_dst are reversed
 
(from 148380-07)
 
        This revision accumulates generic Sustaining patch 148331-07
        into Solaris S10U11 update.
 
(from 148380-06)
 
        This revision accumulates generic Sustaining patch 148331-06
        into Solaris S10U11 update.
 
(from 148380-05)
 
        This revision accumulates generic Sustaining patch 148331-05
        into Solaris S10U11 update.
 
(from 148380-04)
 
        This revision accumulates generic Sustaining patch 148331-04
        into Solaris S10U11 update.
 
(from 148380-03)
 
        This revision accumulates generic Sustaining patch 148331-03
        into Solaris S10U11 update.
 
(from 148380-02)
 
        This revision accumulates generic Sustaining patch 148331-02
        into Solaris S10U11 update.
 
(from 148380-01)
 
        This revision accumulates generic Sustaining patch 148331-01
        into Solaris S10U11 update.
 
(from 148331-07)
 
7153517 adding some rules to ipf.conf, kernel panic in ipf module
7171465 ipnat -FC command always reports 4 entries flushed
 
(from 148331-06)
 
7132744 ipfstat -io doesn't show subgrouped rules after applying kernel patch
 
(from 148331-05)
 
7154821 auth for outbound packets - backport delta needed
 
(from 148331-04)
 
7041326 IPF auth does not work for outbound packets
 
(from 148331-03)
 
7057409 /dev/ipauth must not harm other devices
 
(from 148331-02)
 
6714319 IPFilter causes failure of IPv6 compliance tests
6813307 memory leaks at frrequest
6857600 IPFilter parser chokes on short IPv6 fragments
6897532 race condition window around fr_enable_active still opened
7033429 "keep state" directive in IPFilter rule(s) is now dropping multicast packets (UDP) randomly
7058343 IPF panic when disabled
7069945 "ipf" module seems to have triggered system panic
 
(from 148331-01)
 
7084781 ippool does not accept IPv6 addresses

--------------------------------
 
Please refer to the man pages for instructions on using 'patchadd'
and 'patchrm' commands provided with Solaris.
 
The following example installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/123456-07
 
The following example removes a patch from a standalone system:
 
       example# patchrm 123456-07
 
For additional examples please see the appropriate man pages. Any
other special or non-generic installation instructions should be
described below as special instructions.

-----------------------------
 
NOTE 1:  For anyone using the round-robin feature in an ipnat configuration,
         it is now possible to specify a round-robin id number after the
         round-robin keyword in NAT rules as follows:
 
rdr net1 203.1.2.3/32 port 80 -> 203.1.2.3,203.1.2.4 port 80 tcp round-robin 1
rdr net1 203.1.2.3/32 port 80 -> 203.1.2.5 port 80 tcp round-robin 1
 
         The trailing "1" is considered the round-robin id.  Supplying an id
         number forces the round-robin rules with same id to act together, and
         prevents other rules that match the same packets (whether or not they
         are part of any load balancing) from inadvertently impacting the
         round-robin operation for the specific group of rules."