APC Network Shutdown and Solaris 10 firewall
One day, not too long ago, when the power went out in my neighborhood (for some unknown reason), I was pondering whether or not the machines here would shutdown cleanly. I knew I had a reasonable amount of battery life, but that wouldn’t be enough if the outage was extensive.I had already configured the APC UPS (with the network card) to my satisfaction, and also loaded the APC Network Shutdown software into the root zone of my Solaris 10 x86 box. Over the course of many tests, I realized that my Solaris 10 firewall was in the way. I had to create a new rule to allow any UDP traffic, originating from the APC network interface, to allow communication to the broadcast IP address of my local network. At first, I only allowed specific communication between the two via UDP, but after much examination, realized it was broadcasting.Here are my IPF rules:
pass in quick on nge0 proto udp from 10.0.0.10 to any port = 3052
pass in quick on nge0 proto tcp from 10.0.0.10/32 to 10.0.0.2 port = 2161 flags S keep state
pass in quick on nge0 proto tcp from 10.0.0.10/32 to 110.0.0.2 port = 3052 flags S keep state
pass in quick on nge0 proto tcp from 10.0.0.10/32 to 10.0.0.2 port = 6547 flags S keep state
Hope this saves someone some headaches in the future.
