Oracle Sun SPARC Enterprise M3000 Reference Manual page 267

-n
-q
-s address[/mask]
-y
EXTENDED
■
DESCRIPTION
■
■
■
■
■
■
■
■
■
Automatically answers "n" (no) to all prompts.
Suppresses all messages to stdout, including prompts.
Specifies the sender of the IP packet. Either an IP address or a
network IP address with a netmask (/mask) added can be
specified.
To specify an IP address or a network IP address, use the
standard form of four integer values delimited by "." (periods).
For example, use xxx.xxx.xxx.xxx, where xxx is an integer from
0-255. Zero suppression can be used to specify the integer.
If the -s option is omitted, the filtering rule is applied to all IP
packets received via the specified network interface.
Automatically answers "y" (no) to all prompts.
When the command is executed, a prompt to confirm execution of the command
with the specified options is displayed. Enter "y" to execute the command or "n"
to cancel the command.
The IP packet filtering rules are applied in the order in which they are defined.
Rules for permitted senders must be defined before filter restrictions. First,
configure permitted senders; then, configure the setting for dropped packets. If
specified in reverse order, all IP packets will be dropped.
Improper filtering rules can prevent normal network functions for the interface.
If both the -i interface and the -s address [/mask] options are omitted, the rule is
applied to all IP packets received through XSCF-LAN.
If the netmask value specified by the -s address [/mask] option does not
correspond to any of the following, an error results.
Only the most significant bit is 1
■
Repeated 1 from the most significant bit
■
A rule which overlaps with an already-defined IP packet filtering rule cannot be
set.
Up to 16 IP packet filtering rules can be set.
On M8000/M9000 servers, in case the settings cannot be applied to the standby
XSCF and an error results, confirm that the standby XSCF has no errors. After
the confirmation, use the rebootxscf(8) command to reset XSCF in order to apply
the settings.
Use the showpacketfilters(8) command to display the current IP packet
filtering rules.
setpacketfilters(8)
System Administration 253