5198 Want alternate global zone rule set for each ipf netstack 5197 Global zone should be able to manage NGZ ipf state Reviewed by: Jerry Jelinek <jerry.jelinek@joyent.com> Reviewed by: Robert Mustacchi <rm@joyent.com> Reviewed by: Dan McDonald <danmcd@omniti.com> Reviewed by: Darren Reed <darrenr@fastmail.net> Approved by: Richard Lowe <richlowe@richlowe.net>

PSARC/2008/219 Committed API for packet interception PSARC/2008/335 Corrections for Committed API for packet interception PSARC/2008/557 Revision to net instance notification API 4844507 Solaris needs stable interface for packet filtering software 6705155 ipf_stack_init() assumes kmem_alloc with KM_NOSLEEP never fails

6726575 ipfilter needs to be able to do randomised port mapping 6730614 random port numbers are in the wrong range of numbers

6354418 ??? entries hang around for long time

6519043 IP instances sis_check should support automatic checking in nightly 6519047 IP instances sis_check does not have descriptive symbol file names --HG-- rename : usr/src/uts/intel/arp/arp.objt-symbols.obj64 => usr/src/uts/intel/arp/arp.global-objs.debug64 rename : usr/src/uts/intel/hook/hook.objt-symbols.obj64 => usr/src/uts/intel/hook/hook.global-objs.debug64 rename : usr/src/uts/intel/icmp/icmp.objt-symbols.obj64 => usr/src/uts/intel/icmp/icmp.global-objs.debug64 rename : usr/src/uts/intel/ip/ip.objt-symbols.debug64 => usr/src/uts/intel/ip/ip.global-objs.debug64 rename : usr/src/uts/intel/ip/ip.objt-symbols.obj64 => usr/src/uts/intel/ip/ip.global-objs.obj64 rename : usr/src/uts/intel/ipf/ipf.objt-symbols.obj64 => usr/src/uts/intel/ipf/ipf.global-objs.debug64 rename : usr/src/uts/intel/ipsecah/ipsecah.objt-symbols.obj64 => usr/src/uts/intel/ipsecah/ipsecah.global-objs.debug64 rename : usr/src/uts/intel/ipsecesp/ipsecesp.objt-symbols.obj64 => usr/src/uts/intel/ipsecesp/ipsecesp.global-objs.debug64 rename : usr/src/uts/intel/keysock/keysock.objt-symbols.obj64 => usr/src/uts/intel/keysock/keysock.global-objs.debug64 rename : usr/src/uts/intel/neti/neti.objt-symbols.obj64 => usr/src/uts/intel/neti/neti.global-objs.debug64 rename : usr/src/uts/intel/rts/rts.objt-symbols.obj64 => usr/src/uts/intel/rts/rts.global-objs.debug64 rename : usr/src/uts/intel/spdsock/spdsock.objt-symbols.obj64 => usr/src/uts/intel/spdsock/spdsock.global-objs.debug64 rename : usr/src/uts/intel/tun/tun.objt-symbols.obj64 => usr/src/uts/intel/tun/tun.global-objs.debug64 rename : usr/src/uts/sparc/arp/arp.objt-symbols.obj64 => usr/src/uts/sparc/arp/arp.global-objs.debug64 rename : usr/src/uts/sparc/hook/hook.objt-symbols.obj64 => usr/src/uts/sparc/hook/hook.global-objs.debug64 rename : usr/src/uts/sparc/icmp/icmp.objt-symbols.obj64 => usr/src/uts/sparc/icmp/icmp.global-objs.debug64 rename : usr/src/uts/sparc/ip/ip.objt-symbols.debug64 => usr/src/uts/sparc/ip/ip.global-objs.debug64 rename : usr/src/uts/sparc/ip/ip.objt-symbols.obj64 => usr/src/uts/sparc/ip/ip.global-objs.obj64 rename : usr/src/uts/sparc/ipsecah/ipsecah.objt-symbols.obj64 => usr/src/uts/sparc/ipsecah/ipsecah.global-objs.debug64 rename : usr/src/uts/sparc/ipsecesp/ipsecesp.objt-symbols.obj64 => usr/src/uts/sparc/ipsecesp/ipsecesp.global-objs.debug64 rename : usr/src/uts/sparc/keysock/keysock.objt-symbols.obj64 => usr/src/uts/sparc/keysock/keysock.global-objs.debug64 rename : usr/src/uts/sparc/neti/neti.objt-symbols.obj64 => usr/src/uts/sparc/neti/neti.global-objs.debug64 rename : usr/src/uts/sparc/rts/rts.objt-symbols.obj64 => usr/src/uts/sparc/rts/rts.global-objs.debug64 rename : usr/src/uts/sparc/spdsock/spdsock.objt-symbols.obj64 => usr/src/uts/sparc/spdsock/spdsock.global-objs.debug64 rename : usr/src/uts/sparc/tun/tun.objt-symbols.obj64 => usr/src/uts/sparc/tun/tun.global-objs.debug64