Hello Dan,
in the meantime I reinstalled my OpenIndiana VM, but the problem persists with this new installation and using the newest ISO file for installation.
Here is the output of ipf -f /etc/ipf/ipf.conf:
root@openindiana ~ # ipf -f /etc/ipf/ipf.conf
5:ioctl(add/insert rule): File exists
7:ioctl(add/insert rule): File exists
11:ioctl(add/insert rule): File exists
12:ioctl(add/insert rule): File exists
14:ioctl(add/insert rule): File exists
25:ioctl(add/insert rule): File exists
27:ioctl(add/insert rule): File exists
29:ioctl(add/insert rule): File exists
31:ioctl(add/insert rule): File exists
33:ioctl(add/insert rule): File exists
36:ioctl(add/insert rule): File exists
38:ioctl(add/insert rule): File exists
40:ioctl(add/insert rule): File exists
42:ioctl(add/insert rule): File exists
45:ioctl(add/insert rule): File exists
49:ioctl(add/insert rule): File exists
55:ioctl(add/insert rule): File exists
With ipfilter disabled:
5:ioctl(add/insert rule): I/O error
7:ioctl(add/insert rule): I/O error
11:ioctl(add/insert rule): I/O error
12:ioctl(add/insert rule): I/O error
14:ioctl(add/insert rule): I/O error
25:ioctl(add/insert rule): I/O error
27:ioctl(add/insert rule): I/O error
29:ioctl(add/insert rule): I/O error
31:ioctl(add/insert rule): I/O error
33:ioctl(add/insert rule): I/O error
36:ioctl(add/insert rule): I/O error
38:ioctl(add/insert rule): I/O error
40:ioctl(add/insert rule): I/O error
42:ioctl(add/insert rule): I/O error
45:ioctl(add/insert rule): I/O error
49:ioctl(add/insert rule): I/O error
55:ioctl(add/insert rule): I/O error
When I run
root@openindiana /etc/rc3.d # ipf -6 -Fa
root@openindiana /etc/rc3.d # ipf -Fa
before, to flush tables:
root@openindiana /etc/rc3.d # ipf -f /etc/ipf/ipf.conf
root@openindiana /etc/rc3.d #
I will attach the /var/svc/log/network-ipfilter:default.log to this message.
On 17th March 2022 I did enable ipfilter, so only the messages from that date relevant I think.
When ipfilter is enabled, with the pkcfirewall script:
root@openindiana /etc/rc3.d # ipfstat -io
pass out quick on lo0 all
pass out on vioif0 proto tcp from any to any flags S/FSRPAU keep state keep frags
pass out on vioif0 proto udp from any to any keep state
pass out on vioif0 proto icmp from any to any keep state
pass in quick on lo0 all
pass in quick on vioif0 proto icmp from any to any keep state
pass in log proto tcp from any to any port = domain keep state
pass in log proto udp from any to any port = domain keep state
pass in quick on vioif0 proto udp from any to any port = bootpc keep state
pass in quick on vioif0 proto udp from any to any port = dhcpv6-client keep state
pass in quick on vioif0 proto tcp from any to any port = http flags S/FSRPAU keep state
pass in quick on vioif0 proto tcp/udp from any to any port = kerberos keep state
pass in quick on vioif0 proto udp from any to any port = kerberos keep state
pass in quick on vioif0 proto udp from any to any port = ntp keep state
pass in quick on vioif0 proto tcp from any to any port = https flags S/FSRPAU keep state
pass in quick on vioif0 proto tcp from any to any port = ssh flags S/FSRPAU keep state
block in log first quick on vioif0 all
root@openindiana /etc/rc3.d # ipfstat -io -6
pass out quick on lo0 all
pass out on vioif0 proto tcp from ::/0 to ::/0 flags S/FSRPAU keep state keep frags
pass out on vioif0 proto udp from ::/0 to ::/0 keep state
pass out on vioif0 proto ipv6 from ::/0 to ::/0 keep state
pass out on vioif0 proto ipv6-icmp from ::/0 to ::/0
pass in quick on lo0 all
pass in quick on vioif0 proto ipv6 from ::/0 to ::/0 keep state
pass in quick on vioif0 proto ipv6-icmp from ::/0 to ::/0
pass in log proto tcp from ::/0 to ::/0 port = domain keep state
pass in log proto udp from ::/0 to ::/0 port = domain keep state
pass in quick on vioif0 proto udp from ::/0 to ::/0 port = bootpc keep state
pass in quick on vioif0 proto udp from ::/0 to ::/0 port = dhcpv6-client keep state
pass in quick on vioif0 proto tcp from ::/0 to ::/0 port = http flags S/FSRPAU keep state
pass in quick on vioif0 proto tcp/udp from ::/0 to ::/0 port = kerberos keep state
pass in quick on vioif0 proto udp from ::/0 to ::/0 port = kerberos keep state
pass in quick on vioif0 proto udp from ::/0 to ::/0 port = ntp keep state
pass in quick on vioif0 proto tcp from ::/0 to ::/0 port = https flags S/FSRPAU keep state
pass in quick on vioif0 proto tcp from ::/0 to ::/0 port = ssh flags S/FSRPAU keep state
block in log first quick on vioif0 all
I also attached my /etc/ipf/ipf.conf and /etc/ipf/ipf6.conf to the next message.
Thank you very much!
Sincerely,
Adrian Kieß