<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Sun Solaris System Admin &#187; ndd</title>
	<atom:link href="http://www.sunsolarisadmin.com/tag/ndd/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.sunsolarisadmin.com</link>
	<description>Sun Solaris HowTo's Tips Tricks Tutorials</description>
	<lastBuildDate>Wed, 16 Jun 2010 21:07:06 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
<image>
<link>http://www.sunsolarisadmin.com</link>
<url>http://www.sunsolarisadmin.com/wp-content/mbp-favicon/favicon.ico</url>
<title>Sun Solaris System Admin</title>
</image>
		<item>
		<title>Increase/Decrease route flushing time period in Solaris</title>
		<link>http://www.sunsolarisadmin.com/networking/increasedecrease-route-flushing-time-period-in-solaris/</link>
		<comments>http://www.sunsolarisadmin.com/networking/increasedecrease-route-flushing-time-period-in-solaris/#comments</comments>
		<pubDate>Thu, 24 Apr 2008 19:08:05 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Networking]]></category>
		<category><![CDATA[ARP]]></category>
		<category><![CDATA[ndd]]></category>
		<category><![CDATA[route]]></category>
		<category><![CDATA[routing-table]]></category>
		<category><![CDATA[solaris]]></category>
		<category><![CDATA[sun]]></category>

		<guid isPermaLink="false">http://www.sunsolarisadmin.com/networking/increasedecrease-route-flushing-time-period-in-solaris/</guid>
		<description><![CDATA[Just as we saw modifying the caching time for ARP entries in the ARP table here. We can modify the default time that a sun Solaris system can hold the routing entries. The default time for which a dynamically learnt Route entry in the routing table is 20mins (1200000ms) To Display current Route holding time [...]]]></description>
			<content:encoded><![CDATA[<p><!--adsense--><br />
Just as we saw modifying the caching time for ARP entries in the ARP table <a title="Reduce ARP Caching time in Sun Solaris" href="http://www.sunsolarisadmin.com/security/reduce-arp-caching-time-in-sun-solaris-using-ndd/" target="_blank">here</a>. We can modify the default time that a sun Solaris system can hold the routing entries.</p>
<p>The default time for which a dynamically learnt Route entry in the routing table is 20mins (1200000ms)</p>
<p><span id="more-50"></span></p>
<p><strong><span style="text-decoration: underline;">To Display current Route holding time</span></strong></p>
<p>To display the current time interval to hold a route entry</p>
<p><strong>In Solaris 8/9/10</strong></p>
<blockquote><p><strong>sunsolaris# ndd -get /dev/ip ip_ire_arp_interval<br />
</strong>1200000</p></blockquote>
<p><strong>In earlier versions to Solaris 8</strong></p>
<blockquote><p><strong>sunsolaris# ndd -get /dev/ip ip_ire_flush_interval</strong></p></blockquote>
<p><strong><span style="text-decoration: underline;">To modify the Route holding time</span></strong> </p>
<p><!--adsense#AD2-->This can be modified or reduced to a lower level. To modify the default time to say 15 mins</p>
<p><strong>In Solaris 8/9/10</strong></p>
<blockquote><p><strong>sunsolaris# ndd -set /dev/ip ip_ire_arp_interval 900000</strong></p></blockquote>
<p>In earlier versions to Solaris 8</p>
<blockquote><p><strong>sunsolaris# ndd -set /dev/ip ip_ire_flush_interval 900000</strong></p></blockquote>
]]></content:encoded>
			<wfw:commentRss>http://www.sunsolarisadmin.com/networking/increasedecrease-route-flushing-time-period-in-solaris/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How to disable IP Forwarding in Sun Solaris</title>
		<link>http://www.sunsolarisadmin.com/solaris-7/how-to-disable-ip-forwarding-in-sun-solaris/</link>
		<comments>http://www.sunsolarisadmin.com/solaris-7/how-to-disable-ip-forwarding-in-sun-solaris/#comments</comments>
		<pubDate>Wed, 19 Mar 2008 19:36:51 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Solaris 10]]></category>
		<category><![CDATA[Solaris 7]]></category>
		<category><![CDATA[Solaris 8]]></category>
		<category><![CDATA[Solaris 9]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[forwarding]]></category>
		<category><![CDATA[ip]]></category>
		<category><![CDATA[ndd]]></category>
		<category><![CDATA[packet]]></category>
		<category><![CDATA[solaris]]></category>
		<category><![CDATA[sun]]></category>

		<guid isPermaLink="false">http://www.sunsolarisadmin.com/solaris-7/how-to-disable-ip-forwarding-in-sun-solaris/</guid>
		<description><![CDATA[IP packet forwarding is the process of routing packets between network interfaces on one system. A packet arriving on one network interface and addressed to a host on a different network is forwarded to the appropriate interface. While this is a job for the network router, Servers with multiple interfaces connected to different network can [...]]]></description>
			<content:encoded><![CDATA[<p><!--adsense--></p>
<p>IP packet forwarding is the process of routing packets between network interfaces on one system. A packet arriving on one network interface and addressed to a host on a different network is forwarded to the appropriate interface. While this is a job for the network router, Servers with multiple interfaces connected to different network can perform this action as well. This behaviour as a router is a default in Sun Solaris Operating Systems.</p>
<p><span id="more-32"></span></p>
<p>If your Sun Solaris server has multiple interfaces and is not intended to route packets between the networks it is connected to, then it is advisable to disable this option. This can be a potential target for a malicious hacker as this can potentially allow the hacker access to the network at the other side.</p>
<p>To disable this packet forwarding in Solaris, simply create the file</p>
<p><strong>/etc/notrouter</strong></p>
<p>and reboot the server. However, if reboot is not an option at this time, then usee the NDD command to disble the option:</p>
<p>To display the current status</p>
<p><strong># ndd /dev/ip ip_forwarding<br />
1</strong></p>
<p><em>0 is Disabled<br />
1 is Enabled</em></p>
<p>To disable,</p>
<p><strong># ndd -set /dev/ip ip_forwarding 0</strong></p>
<p><strong>For IPv6</strong></p>
<p><strong># ndd -set /dev/ip6 ip6_forwarding 0</strong></p>
<p>This should disable. To confirm change,</p>
<p><strong><em># ndd /dev/ip ip_forwarding<br />
0</em></strong></p>
<p><strong><em># ndd /dev/ip6 ip6_forwarding<br />
0</em></strong></p>
<p>In Solaris 8 and later, IP forwarding can be enabled or disabled on a per interface basis. For example, if there are 3 hme NIC cards namely hme0,hme1,hme2 then assume, we allow IP Forwarding only from hme0 and disable on hme1 and hme2 then the following will help:</p>
<p><strong><em># ndd -set /dev/ip hme0:ip_forwarding 1<br />
# ndd -set /dev/ip hme1:ip_forwarding 0<br />
# ndd -set /dev/ip hme2:ip_forwarding 0</em></strong></p>
<p>This should help</p>
]]></content:encoded>
			<wfw:commentRss>http://www.sunsolarisadmin.com/solaris-7/how-to-disable-ip-forwarding-in-sun-solaris/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
