Solaris host-based firewall [PSARC/2008/580 FastTrack]

[James Carlson]

Nicolas Williams writes:
> Perhaps, but those terms ("whitelist" and "blacklist") are widely in use
> in general.  And as for 'allow' being "the most restrictive mode" --
> that's confusing!
> 
> Where else in Solaris do we have an example of such a design?

TCP Wrappers (/etc/hosts.allow and /etc/hosts.deny) and cron
(/usr/lib/cron/at.allow and /usr/lib/cron/at.deny) come to mind.

-- 
James Carlson, Solaris Networking              <james.d.carlson at sun.com>
Sun Microsystems / 35 Network Drive        71.232W   Vox +1 781 442 2084
MS UBUR02-212 / Burlington MA 01803-2757   42.496N   Fax +1 781 442 1677