Solaris host-based firewall [PSARC/2008/580 FastTrack]

[John Plocher]

Tony Nguyen wrote:
> I agree that ipf command features can't be replaced by the current SMF. 
> In this specific example, the three ipf commands can be replaced by a 
> single svcadm restart command so it was really tempting :)


It may be useful to use this as an example:

   ... BTW, the svcadm interface invokes the following commands,
   which illustrate the use of ipf...


   -John