I have a couple Suns at home and one of them runs MorningStar PPP
to link to the Internet. The nice thing about MST's PPP is that it
has built in packet filtering for the link.
I'm gradually shifting over to Solaris 2.x. Since ppp is now included
with Solaris 2.3, I am strongly inclined in that direction. As far as
I can tell, Sun's PPP does not include any packet filtering. Is there
some other method by which one can insert something between an IP
interface and the IP network layer under Solaris 2.x? The distinction here
is that not only do I desire to protect other machines on the net
from certain packets from the Internet (in which case simply turning
IP forwarding off would go a long way), but I want to protect certain
ports on the machine with the link as well.