Re: [FW1] how to disable RIP on sun ultra 10 solaris?

[Steven Lee <steve.lee@FW1-NOSPAMavcom.com>]

If /etc/defaultrouter exists and has a valid IP address in it, then
in.routed will *NOT* start, and there will not be any dynamic routing
set on the system (doesn't matter whether or not it's a firewall).
Any routes you need for connectivity with internal or external
network not locally attached (or covered by the default) must
be entered manually using static routes.

To convince yourself of this, boot a Solaris system with an entry
in /etc/defaultrouter, and run the following command:

ps -ef | grep route

Steve

Patrick Koehne wrote:

> eSafe Gateway(tm) has scanned this mail for viruses, vandals and
> suspicious attachments and has found it to be CLEAN.
> ______________________________________________________________
>
> Hi
>
> >> if the firewall has multiple interfaces and behind these there are different
> >> nets than the one directly connected to the firewall, routed has to run,
> >> doesn't it?
> >
> >No it does not (nor should it ever for a firewall).  Best practices for
>
> But I think the question was if "routed" has to run anyway! It only
> shouldn't speak any routing protocols. That is invoked by editing the file
> /etc/defaultrouter. But the daemon himself has to run, hasn't it?
>
> Bye Patrick
>
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================

--
Steven Lee, CISSPSenior Network Security EngineerFAX
AVCOM Technologies, IncPager
4636 E Marginal Way S, Ste B-100   http://www.avcom.com
Seattle, WA 98134-2383             mailto:steve.lee@avcom.com




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================