5198 Want alternate global zone rule set for each ipf netstack 5197 Global zone should be able to manage NGZ ipf state Reviewed by: Jerry Jelinek <jerry.jelinek@joyent.com> Reviewed by: Robert Mustacchi <rm@joyent.com> Reviewed by: Dan McDonald <danmcd@omniti.com> Reviewed by: Darren Reed <darrenr@fastmail.net> Approved by: Richard Lowe <richlowe@richlowe.net>

PSARC/2008/219 Committed API for packet interception PSARC/2008/335 Corrections for Committed API for packet interception PSARC/2008/557 Revision to net instance notification API 4844507 Solaris needs stable interface for packet filtering software 6705155 ipf_stack_init() assumes kmem_alloc with KM_NOSLEEP never fails

6726575 ipfilter needs to be able to do randomised port mapping 6730614 random port numbers are in the wrong range of numbers

6354418 ??? entries hang around for long time

6556223 The fix of 6519043 is incomplete, usr/src/uts/sparc/ipf/ipf.objt-symbols.obj64 should be changed too --HG-- rename : usr/src/uts/sparc/ipf/ipf.objt-symbols.obj64 => usr/src/uts/sparc/ipf/ipf.global-objs.debug64